Information on this site is advertising in nature.
× Home About Services Contact

GDPR Compliance

Last updated: 16 June 2026

This page provides information about how sienna-petal handles personal data in compliance with the General Data Protection Regulation (GDPR) for visitors and customers from the European Economic Area.

Data Controller

sienna-petal acts as the data controller for personal information collected through this website. Our contact details are:

Email: [email protected]
Address: 42 Harbour View Drive, Sydney, NSW 2000, Australia

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
  • Contract: Where processing is necessary for the performance of a contract with you, such as providing renovation services.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms.
  • Legal Obligation: Where we need to comply with legal requirements.

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct inaccurate or incomplete data.
  • Right to Erasure: You can request that we delete your personal data in certain circumstances.
  • Right to Restrict Processing: You can request that we limit how we use your data.
  • Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
  • Right to Object: You can object to certain types of processing, including direct marketing.
  • Rights Related to Automated Decision Making: You have rights concerning automated decisions that significantly affect you.

International Data Transfers

As we are based in Australia, your personal data may be transferred to and processed in Australia. We ensure that appropriate safeguards are in place to protect your data when transferred outside the EEA, including reliance on adequacy decisions or standard contractual clauses where applicable.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on the nature of the data and our legal obligations. When data is no longer required, it is securely deleted or anonymised.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month, although this period may be extended by two further months where necessary, considering the complexity and number of requests.

Complaints

If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.

Updates to This Information

We may update this GDPR compliance information periodically. Any changes will be reflected on this page with an updated revision date.