Last Updated: September 29, 2026
Amethyst-thicket is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Australian data protection laws. This page outlines how we comply with GDPR principles and your rights under this regulation.
For the purposes of GDPR, the data controller is:
Amethyst-thicket
47 Wilderness Lane
Brisbane, QLD 4000
Australia
Email: [email protected]
We process personal data only when we have a lawful basis:
We obtain explicit consent before processing data for marketing communications or optional services. You can withdraw consent at any time by contacting us.
Processing is necessary to fulfill our contractual obligations when you book a wilderness experience, including trip coordination, safety management, and service delivery.
We process data to improve our services, ensure website security, and maintain safety standards, provided these interests do not override your fundamental rights.
We process data to comply with safety regulations, emergency response requirements, and legal reporting obligations.
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.
If your personal data is inaccurate or incomplete, you have the right to request correction or completion.
You can request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when there is no legal basis for processing. This right is subject to legal retention requirements.
You can request limitation of how we use your data in certain circumstances, such as when you contest accuracy or object to processing.
You have the right to receive your personal data in a machine-readable format and transmit it to another controller where technically feasible.
You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
We do not use automated decision-making or profiling that produces legal effects concerning you.
To exercise any of these rights, contact us at [email protected] with:
We will respond within 30 days. If your request is complex or we receive multiple requests, we may extend this period by two months and will inform you of the delay.
We primarily store and process data within Australia. If data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions by regulatory authorities.
In the event of a data breach that poses risks to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, as required by GDPR.
We implement data protection measures throughout our operations:
We do not knowingly process personal data of individuals under 16 without parental consent. If we become aware of such processing, we will delete the data unless parental consent is obtained.
We retain personal data only for as long as necessary:
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant supervisory authority:
Australian Information Commissioner
Website: www.oaic.gov.au
Email: [email protected]
For EU residents, you may contact your local data protection authority.
We review and update this GDPR compliance information regularly. Material changes will be communicated through our website and, where appropriate, directly to affected individuals.
For questions about GDPR compliance or data protection practices:
Email: [email protected]
Address: 47 Wilderness Lane, Brisbane, QLD 4000, Australia