GDPR Compliance

Last updated: October 26, 2026

Our Commitment to Data Protection

Prairie-tapir is committed to protecting your personal data and respecting your privacy rights. While we operate primarily in Australia, we recognize and honor the principles established by the General Data Protection Regulation (GDPR) for all our clients.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual necessity: to provide the cleaning services you have requested
• Legitimate interests: to improve our services and maintain business records
• Legal obligation: to comply with applicable laws and regulations
• Consent: where you have provided explicit consent for specific purposes

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You can request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Data Processing Activities

We process personal data for the following purposes:

• Service delivery and customer relationship management
• Billing and payment processing
• Communication regarding services and schedules
• Quality improvement and customer satisfaction analysis
• Legal compliance and dispute resolution

Data Sharing and Transfers

We do not transfer personal data outside of Australia without appropriate safeguards. When sharing data with service providers, we ensure they maintain adequate data protection standards through contractual agreements.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Customer contact information: retained during active business relationship and for 2 years thereafter
• Service records: retained for 7 years for legal and accounting purposes
• Payment information: retained as required by financial regulations
• Marketing communications: retained until consent is withdrawn

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection principles
• Incident response and breach notification procedures

Automated Decision Making

We do not engage in automated decision making or profiling that produces legal effects or similarly significant consequences for individuals.

Data Protection Officer

For questions or concerns about data protection, or to exercise your rights, contact us at [email protected]

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.