GDPR Compliance Statement

Last updated: August 3, 2026

While we are an Australian-based company, we recognize that some of our website visitors may be located in the European Union or European Economic Area. We are committed to respecting the data protection rights outlined in the General Data Protection Regulation (GDPR) for all individuals, regardless of location.

Legal Basis for Processing

We process personal data only when we have a lawful basis to do so. Our legal bases for processing include:

• Consent: When you explicitly agree to our processing of your data for specific purposes
• Contractual Necessity: When processing is necessary to fulfill a contract with you or take steps at your request before entering into a contract
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these don't override your rights and freedoms
• Legal Obligation: When processing is required to comply with applicable laws and regulations

Your Rights Under GDPR

If you are located in the EU or EEA, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restriction: You can request that we limit how we use your data in certain situations
• Right to Data Portability: You can request transfer of your data to another service provider in a commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Request." Please include:

• Your full name and contact information
• A clear description of which right you wish to exercise
• Any relevant details to help us locate your information
• Proof of identity if requested for security purposes

We will respond to your request within one month, though complex requests may require up to three months. We will inform you if additional time is needed.

Data Processing Activities

We process personal data for the following purposes:

• Providing information about our solar energy services
• Responding to inquiries and consultation requests
• Conducting property assessments and preparing proposals
• Delivering installation and maintenance services
• Managing customer relationships and communications
• Improving our website and service offerings
• Complying with legal and regulatory requirements

Data Recipients

Your personal data may be shared with:

• Service providers who assist with business operations (subject to appropriate data processing agreements)
• Professional advisors when necessary for legal or business purposes
• Government authorities when required by law

We require all third parties to respect the security of your personal data and treat it in accordance with applicable laws. We do not permit third-party service providers to use your personal data for their own purposes.

International Data Transfers

As an Australian company, personal data collected through our website may be transferred to and stored in Australia. Australia has not received an adequacy decision from the European Commission. However, we implement appropriate safeguards to ensure your data receives adequate protection, including:

• Standard contractual clauses approved by the European Commission
• Technical and organizational security measures
• Compliance with applicable data protection laws

Data Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and vulnerability testing
• Employee training on data protection practices
• Incident response procedures

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Retention periods vary depending on the nature of the data and the purpose for which it was collected.

When determining retention periods, we consider:

• The nature and sensitivity of the data
• The purpose for which we collected it
• Legal or regulatory requirements
• Contractual obligations
• Legitimate business interests

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

Changes to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with a revised date.

Contact and Data Protection Officer

For questions about our GDPR compliance or to exercise your data protection rights, please contact:

atoll-verse
45 Riverside Avenue
Brisbane, QLD 4000
Australia
Email: [email protected]

You also have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with applicable data protection laws.