GDPR Compliance Statement

Last Updated: November 3, 2026

Our Commitment to Data Protection

While myth-star.com operates primarily under Australian privacy legislation, we recognize that some visitors may be located in the European Economic Area. This statement outlines how we address General Data Protection Regulation principles in our data handling practices.

Legal Basis for Processing

When we process personal data of individuals in the EEA, we rely on the following legal bases:

Consent: When you voluntarily provide information through forms or subscribe to communications
Legitimate Interests: For analyzing website usage to improve our services and ensuring website security
Contractual Necessity: When processing is necessary to respond to service inquiries or fulfill requests
Legal Obligations: When required to comply with applicable laws and regulations

Your Rights Under GDPR

If you are an EEA resident, you have the following rights regarding your personal data:

Right of Access: Request confirmation of whether we process your personal data and obtain a copy
Right to Rectification: Request correction of inaccurate or incomplete personal data
Right to Erasure: Request deletion of your personal data under certain circumstances
Right to Restrict Processing: Request limitation on how we use your data
Right to Data Portability: Receive your personal data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw previously given consent at any time
Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods depend on the nature of the data and the purpose of processing:

Inquiry forms and correspondence: Retained for three years after last contact
Website analytics data: Anonymized after 26 months
Cookie data: Retained according to our Cookies Policy

International Data Transfers

Our servers are located in Australia. When personal data is transferred from the EEA to Australia, we ensure appropriate safeguards are in place, although Australia does not currently have an adequacy decision from the European Commission. We rely on standard contractual clauses and other approved transfer mechanisms where applicable.

Data Security Measures

We implement technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. These measures include:

Encryption of data in transit using industry-standard protocols
Access controls limiting data access to authorized personnel only
Regular security assessments and updates to protection systems
Employee training on data protection and privacy principles

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the information below. We will respond to verified requests within one month, or inform you if an extension is necessary. We may require additional information to verify your identity before processing requests.

Data Protection Contact

For questions about our GDPR compliance or to submit data subject requests:

Email: [email protected]

Address: 127 Fitzroy Street, St Kilda, Victoria 3182, Australia

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated revision date.