GDPR Compliance

Last Updated: October 14, 2026

Data Controller

Marsh-ocelot is the data controller responsible for your personal information.

Legal Basis for Processing

We process personal data based on:

• Consent: You have given clear consent for processing personal data for specific purposes
• Contract: Processing is necessary for a contract with you
• Legitimate interests: Processing is necessary for our legitimate interests

Data Subject Rights

Under GDPR, you have the right to:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request limitation of processing
• Right to data portability: Request transfer of data to another organization
• Right to object: Object to processing of your data

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law.

International Data Transfers

If data is transferred outside Australia, we ensure appropriate safeguards are in place to protect your information.

Exercising Your Rights

To exercise any of your rights under GDPR, contact us at: [email protected]

We will respond to requests within one month.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority.