GDPR Compliance

Last Updated: May 11, 2026

Introduction

While wistful-mint is an Australian-based company primarily serving Australian residents, we recognize that individuals from the European Union may visit our website. We are committed to complying with the General Data Protection Regulation (GDPR) for any EU residents whose personal data we process.

Legal Basis for Processing

We process personal data only when we have a lawful basis to do so. Under GDPR, our lawful bases include:

• Consent: When you explicitly agree to our processing of your personal data
• Contract: When processing is necessary to perform our services under a contract with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement occurred.

Data Transfers

As an Australian company, your personal data may be transferred to and stored in Australia. We ensure that such transfers comply with GDPR requirements through:

• Implementation of appropriate safeguards and security measures
• Adherence to Australian Privacy Principles, which provide comparable protections
• Use of standard contractual clauses where applicable

Data Protection Officer

For GDPR-related inquiries, you may contact our designated data protection contact:

Email: [email protected]
Address: Level 7, 142 Pitt Street, Sydney NSW 2000, Australia

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects EU residents.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• To provide our services and maintain our relationship with you
• To comply with legal, accounting, or reporting obligations
• To resolve disputes and enforce our agreements

Specific retention periods vary based on the type of data and applicable legal requirements.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children without parental consent. If we become aware that we have collected personal data from a child without proper consent, we will take steps to delete that information.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

When submitting a request, please provide sufficient information to verify your identity and specify which right you wish to exercise.

Updates to This Policy

We may update this GDPR compliance statement from time to time. Material changes will be communicated through our website with an updated "Last Updated" date.