GDPR Compliance

Last Updated: June 16, 2026

General Data Protection Regulation

Canyon Quest is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR).

Data Controller

Canyon Quest is the data controller responsible for your personal information. Our contact details are:

Email: [email protected]

Address: 142 Riverside Parkway, Brisbane, QLD 4000, Australia

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfill our service obligations
• Legitimate Interests: When we have legitimate business interests that do not override your rights
• Legal Obligation: When required to comply with applicable laws

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data that we hold.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain circumstances.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt.

Data Protection Officer

For questions specifically related to data protection, you may contact our data protection representative at [email protected].

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws.

International Data Transfers

We primarily process data within Australia. If we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of significant changes.

Contact Us

For any questions or concerns regarding GDPR compliance or your data protection rights, please contact us at [email protected].