GDPR Compliance

Last Updated: September 2, 2026

Our Commitment to GDPR

While lotus-works operates primarily in Australia, we recognize that visitors from the European Union may use our services. We are committed to complying with the General Data Protection Regulation (GDPR) for all EU residents.

Data Controller

For the purposes of GDPR, the data controller is:

lotus-works
Level 14, Collins Tower
420 Collins Street
Melbourne VIC 3000
Australia
Email: info@lotus-works.com

Your Rights Under GDPR

If you are an EU resident, you have the following rights:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your data protection rights.

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@lotus-works.com with the following information:

• Your full name and email address
• Description of your request
• Any relevant details to help us locate your data

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: To fulfill our tour booking services
• Legitimate interests: To improve our services and maintain business operations
• Consent: For marketing communications
• Legal obligations: To comply with applicable laws

International Data Transfers

When transferring data from the EU to Australia, we ensure appropriate safeguards are in place. Australia is recognized by the European Commission as providing adequate protection for personal data transferred from the EU.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours and inform affected individuals without undue delay.

Children's Data

We do not knowingly process personal data of children under 16 without parental consent. If you believe we have collected such data, please contact us immediately.

Updates to This Notice

We may update this GDPR compliance notice periodically. Significant changes will be communicated through our website or directly to affected individuals.

Contact Information

For questions about GDPR compliance or to exercise your rights, contact:

Email: info@lotus-works.com
Subject line: GDPR Request