GDPR Compliance Statement

Last Updated: July 29, 2026

Introduction

This statement outlines how sleek-birch complies with the General Data Protection Regulation (GDPR) when processing personal data of individuals located in the European Economic Area. While we operate primarily in Australia, we recognize the importance of protecting the data rights of all visitors to our website.

Legal Basis for Processing

We process personal data only when we have a lawful basis to do so under GDPR Article 6:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill a contract we have with you
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided this does not override your rights

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restriction: You can request that we limit how we use your data
• Right to Data Portability: You can request transfer of your data to another organization
• Right to Object: You can object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision-Making: You have rights regarding automated processing and profiling

Data We Collect

We collect and process the following categories of personal data:

• Identity information (name, business name)
• Contact information (email address, postal address)
• Technical information (IP address, browser type, device identifiers)
• Usage information (pages visited, interaction data)
• Project information (specifications, requirements, communications)
• Financial information (payment details for transactions)

How We Use Your Data

We process your personal data for:

• Responding to enquiries and providing requested information
• Preparing quotations and managing manufacturing projects
• Processing orders and arranging delivery
• Maintaining customer accounts and records
• Improving our website and services
• Sending marketing communications (with your consent)
• Complying with legal and regulatory requirements

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Enquiry information: Retained for 2 years if no project proceeds
• Project and order information: Retained for 7 years for business records
• Marketing consent records: Retained until consent is withdrawn
• Technical and usage data: Typically retained for 12 months

Data Sharing and Transfers

We do not sell personal data to third parties. We may share data with:

• Service providers who assist with business operations (subject to data processing agreements)
• Professional advisors bound by confidentiality obligations
• Law enforcement or regulatory authorities when legally required

When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other legally recognized transfer mechanisms

Data Security

We implement technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

Cookies and Tracking

We use cookies and similar technologies on our website. You can manage cookie preferences through your browser settings. For detailed information, see our Cookies Policy. We only use non-essential cookies with your consent.

Marketing Communications

We will only send you marketing communications if you have given specific consent. You can withdraw consent at any time by:

• Using the unsubscribe link in our emails
• Contacting us directly at [email protected]
• Updating your communication preferences

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with:

• Your full name and contact information
• Description of the data or right you wish to exercise
• Verification of your identity (to protect your data security)

We will respond to your request within one month, though this may be extended by two months for complex requests. We will inform you of any extension and the reasons for the delay.

Right to Lodge a Complaint

If you believe we have not handled your personal data in compliance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EEA, particularly in the member state where you reside, work, or where the alleged infringement occurred.

Data Protection Officer

For questions regarding our GDPR compliance or data protection practices, please contact us at [email protected].

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised date.