GDPR Compliance Statement

Last Updated: October 7, 2026

Introduction

While Verdant Savanna operates primarily in Australia, we recognize the importance of data protection principles outlined in the European Union's General Data Protection Regulation (GDPR). This statement outlines how we handle personal data for any individuals subject to GDPR protections.

Legal Basis for Processing

We process personal data only when we have a lawful basis, including:

• Consent: You have explicitly agreed to processing for specific purposes
• Contract: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: Processing is required to comply with Australian or international law
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided your rights are not overridden

Data Subject Rights

If you are subject to GDPR protections, you have the following rights:

• Right of Access: Request confirmation of what personal data we process and obtain a copy
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing activities
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where consent is the legal basis

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Data Subject Request." We will respond within one month of receipt, or inform you if an extension is necessary.

Please provide sufficient information to verify your identity and specify which right you wish to exercise. We may request additional information to confirm your identity before processing your request.

Data Transfers

Your personal data is primarily stored and processed in Australia. If we transfer data to countries outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Binding corporate rules or other approved mechanisms

Data Protection Officer

For GDPR-related inquiries or to exercise your data subject rights, contact our data protection representative at [email protected].

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where an alleged infringement occurred.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals without human oversight.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach poses a high risk, we will also notify affected individuals without undue delay.

Contact Information

For questions regarding GDPR compliance or to exercise your data subject rights:

Verdant Savanna
Level 15, 123 Pitt Street
Sydney NSW 2000, Australia
Email: [email protected]