General Data Protection Regulation (GDPR)

Last updated: 1 January 2026

This page provides information about how celestial-class Pty Ltd processes personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) for individuals located in the European Economic Area (EEA) or United Kingdom.

Data Controller

For the purposes of the GDPR, the data controller is:

celestial-class Pty Ltd
ABN 12 345 678 901
Level 4, 287 Collins Street
Melbourne VIC 3000
Australia

Contact: [email protected]

Legal Basis for Processing

We process personal data under one or more of the following legal bases:

  • Consent: You have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or enabling non-essential cookies
  • Contract: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
  • Legal Obligation: Processing is necessary for compliance with legal obligations to which we are subject
  • Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing and there are no overriding legitimate grounds.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when you have objected to processing pending verification of whether our legitimate grounds override yours.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently make such automated decisions.

International Data Transfers

As an Australian company, your personal data may be transferred to and processed in Australia. Australia is not currently the subject of a European Commission adequacy decision.

For transfers of personal data from the EEA or UK to Australia, we rely on:

  • Standard Contractual Clauses approved by the European Commission
  • Your explicit consent, where appropriate
  • The transfer being necessary for the performance of a contract with you

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When determining retention periods, we consider:

  • The nature and sensitivity of the personal data
  • The purposes for which we process the data
  • Applicable legal, regulatory, and professional requirements
  • Our legitimate business interests

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us using the details below. We may need to verify your identity before fulfilling your request. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

There is generally no charge for exercising your rights. However, we may charge a reasonable fee or refuse to comply with requests that are manifestly unfounded or excessive.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For individuals in the UK, this is the Information Commissioner's Office (ICO). For individuals in EEA member states, this is typically the data protection authority in your country of residence.

We encourage you to contact us first so we have the opportunity to address your concerns directly.

Updates

We may update this GDPR information from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

For questions about this page or to exercise your GDPR rights, please contact:

Email: [email protected]
Post: Privacy Officer, celestial-class Pty Ltd, Level 4, 287 Collins Street, Melbourne VIC 3000, Australia