Information for visitors and customers from the European Economic Area.
Last Updated: 1 January 2026
cliff-trek respects the privacy rights of individuals in the European Economic Area (EEA) and is committed to compliance with the General Data Protection Regulation (GDPR). This page provides additional information about how we handle personal data of EEA residents in accordance with GDPR requirements.
cliff-trek acts as the data controller for personal information collected through our website and services. Our contact details are:
cliff-trek
45 St Georges Terrace
Perth WA 6000
Australia
Email: [email protected]
We process personal data of EEA residents under the following legal bases:
As an EEA resident, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request correction of inaccurate personal data or completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes collected.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
As cliff-trek is based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. Australia is not currently recognised by the European Commission as providing an adequate level of data protection.
To ensure appropriate safeguards for such transfers, we rely on Standard Contractual Clauses approved by the European Commission. You may request a copy of these clauses by contacting us.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two further months where necessary, considering the complexity and number of requests.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority in your country of residence. However, we encourage you to contact us first so we can address your concerns directly.
We may update this GDPR information periodically. We will notify you of material changes by posting the updated information on our website and updating the "Last Updated" date.