GDPR Compliance Statement

Introduction

While Sharp Nails is an Australian-based company primarily serving Australian residents, we recognize that the General Data Protection Regulation (GDPR) may apply to certain aspects of our data processing activities, particularly if we serve clients in the European Economic Area (EEA).

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill our service agreement with you
• Legal Obligation: When required to comply with Australian financial services regulations
• Legitimate Interest: When necessary for our business operations, provided your rights are not overridden

Your GDPR Rights

If you are a resident of the EEA, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain types of processing
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing

Data Processing and Storage

Your personal data is processed and stored in Australia. We ensure appropriate safeguards are in place for any international data transfers, in accordance with GDPR requirements.

Data Protection Officer

For GDPR-related inquiries, you may contact our data protection representative:

Email: [email protected]
Address: Level 12, 45 Clarence Street, Sydney NSW 2000, Australia

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, where required by law.

Third-Party Processing

We work only with service providers who demonstrate GDPR compliance and have appropriate data processing agreements in place.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days.

Complaints

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority in the EEA, or with the Office of the Australian Information Commissioner.

Changes to This Statement

We may update this GDPR compliance statement periodically. Material changes will be communicated through our website.