Legal basis for processing (GDPR Article 6)
Although we are an Australian business, we apply GDPR principles as our standard for everyone, not just EU clients. We process personal data under these legal bases:
- Contract — your booking details, dietary lists and event logistics are processed to deliver the catering service you paid for.
- Legal obligation — invoices and payment records kept under Australian tax law.
- Legitimate interest — responding to enquiries and keeping basic records of completed events.
- Consent — marketing emails, which you can withdraw at any time via the unsubscribe link.
Your GDPR rights
If you are in the EU or UK, or simply want these rights applied to you, you may:
- Access — request a copy of all personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — ask us to delete your data where we have no legal duty to keep it.
- Restriction & objection — limit or object to certain processing.
- Portability — receive your data in a machine-readable format.
- Complain — lodge a complaint with your local supervisory authority or, in Australia, the OAIC.
We respond to all requests within 30 days at no charge.
International data transfers
Your data is stored and processed in Australia. Our booking software and email provider may process limited data on servers overseas; where that happens we use providers bound by standard contractual clauses or equivalent safeguards.
We do not transfer dietary or health-related guest information outside Australia for any purpose other than delivering your event.
