GDPR Compliance Statement

Last updated: May 22, 2026

Our Commitment to GDPR

Although nascent-stone is based in Australia, we respect the rights of all individuals, including those in the European Union. We are committed to complying with the General Data Protection Regulation (GDPR) principles for any EU residents who use our services.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill orders and provide services you've requested
• Legitimate Interests: Processing necessary for our business operations, fraud prevention, and website improvement
• Consent: Processing based on your explicit consent for marketing communications
• Legal Obligation: Processing necessary to comply with legal requirements

Your GDPR Rights

If you are an EU resident, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to certain legal exceptions.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Data Portability

You can request a copy of your data in a structured, commonly used format.

Right to Object

You can object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order information: 7 years (for tax and accounting purposes)
• Marketing data: Until you unsubscribe or request deletion
• Website analytics: 26 months

International Data Transfers

Your data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Protection Officer

For GDPR-related inquiries, you can contact our privacy team at:

Email: [email protected]

Right to Lodge a Complaint

If you are an EU resident, you have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR requirements.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days.