GDPR Compliance

Last Updated: October 7, 2026

General Data Protection Regulation

Lagoon-dash is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws. This page outlines our compliance measures and your rights under GDPR.

Data Controller

For the purposes of GDPR, Lagoon-dash acts as the data controller for personal information collected through our website and services.

Lagoon-dash
Level 12, 485 La Trobe Street
Melbourne VIC 3000
Australia
Email: [email protected]

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
  • Legal obligation: Processing is necessary for us to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data under certain conditions, particularly when processing is based on legitimate interests.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you of any such extension.

When making a request, please provide sufficient information to allow us to verify your identity and locate your data.

Data Protection Principles

We process personal data in accordance with the following principles:

  • Lawfulness, fairness and transparency: We process data lawfully, fairly, and in a transparent manner
  • Purpose limitation: We collect data for specified, explicit, and legitimate purposes
  • Data minimization: We only collect data that is adequate, relevant, and limited to what is necessary
  • Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
  • Storage limitation: We keep personal data only for as long as necessary
  • Integrity and confidentiality: We process data securely and protect against unauthorized or unlawful processing
  • Accountability: We are responsible for and can demonstrate compliance with these principles

International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements. This may include using standard contractual clauses approved by the European Commission.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Right to Lodge a Complaint

If you believe we have not complied with GDPR or other applicable data protection laws, you have the right to lodge a complaint with a supervisory authority in the European Union member state where you live, work, or where you believe a breach has occurred.

Updates to This Page

We may update this GDPR compliance page from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.