quaint-bamboo
This site contains promotional content
  • Our Story
  • Collections
  • Visit Us

GDPR Compliance

Last updated: July 21, 2026

Introduction

While quaint-bamboo operates primarily in Australia, we recognize that visitors from the European Union may access our website. This page outlines how we comply with the General Data Protection Regulation (GDPR) principles and respect the rights of EU data subjects.

Data Controller

For the purposes of data protection law, the data controller is:

quaint-bamboo
127 Weston Street
Brunswick, Victoria 3056
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you provide explicit consent through form submissions or cookie acceptance
  • Legitimate interests: For improving our services, analyzing website traffic, and business communications
  • Legal obligation: When required to comply with applicable laws

Your GDPR Rights

If you are located in the EU, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you and receive a copy of that information.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data.

Right to Restrict Processing

You may request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format, or have it transmitted to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

Data Processing Activities

Consultation Requests

Data collected: Name, email address, project details
Purpose: To respond to inquiries and provide requested services
Legal basis: Consent and legitimate interests
Retention period: Three years from last contact

Website Analytics

Data collected: IP address, browser information, pages visited
Purpose: To analyze and improve website performance
Legal basis: Legitimate interests
Retention period: 24 months

Cookies

Data collected: Cookie preference, session information
Purpose: To remember user preferences and enhance browsing experience
Legal basis: Consent
Retention period: As specified in our Cookies Policy

Data Transfers

Your personal data may be transferred to and stored in Australia. We ensure appropriate safeguards are in place when transferring data outside the EU. If you have concerns about international data transfers, please contact us.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection

Third-Party Processors

We may share personal data with third-party service providers who process data on our behalf. All processors are required to maintain appropriate security measures and process data only in accordance with our instructions.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with GDPR requirements.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this may be extended by up to two months, and we will inform you of any such extension.

Updates to This Statement

We may update this GDPR compliance statement periodically. The "Last updated" date at the top of this page indicates when the most recent changes were made.

quaint-bamboo

Crafting bespoke furniture for Australian homes since 2008

Information

  • About Us
  • Services
  • Contact

Legal

  • Privacy Policy
  • GDPR
  • Cookies Policy
  • Terms of Use

© 2026 quaint-bamboo.com. All rights reserved.