Last Updated: October 26, 2026
This document outlines how Thicket-saga complies with the General Data Protection Regulation (GDPR) and protects the rights of individuals in the European Economic Area, even though we primarily operate in Australia.
We process personal data only when we have a lawful basis to do so. Our legal bases include:
If you are located in the European Economic Area, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data under certain conditions.
You have the right to object to our processing of your personal data under certain conditions.
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by two additional months, in which case we will notify you.
When submitting a request, please provide sufficient information to allow us to verify your identity and locate your data in our systems.
We have appointed a Data Protection Officer who is responsible for overseeing questions in relation to this notice. If you have any questions about this GDPR notice, including requests to exercise your legal rights, please contact our Data Protection Officer at:
Email: [email protected]
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
As we are based in Australia, any personal data collected from individuals in the EEA will be transferred outside the European Economic Area. We ensure that such transfers are protected by appropriate safeguards, such as standard contractual clauses approved by the European Commission.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of your personal data infringes GDPR.
For any GDPR-related inquiries or to exercise your rights, please contact:
GDPR Compliance Officer
Thicket-saga Energy Solutions
47 Mitchell Street
Darwin, NT 0800
Australia
Email: [email protected]