GDPR Compliance

Last Updated: September 22, 2026

Our Commitment to Data Protection

Stellar Space is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws. This page outlines how we comply with GDPR principles.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contractual Necessity: When processing is necessary to fulfill service agreements
  • Legitimate Interests: When we have legitimate business interests that do not override your rights
  • Legal Obligation: When required by law

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes collected.

Right to Restriction

You can request limitation of processing in specific situations, such as when you contest the accuracy of data.

Right to Data Portability

You can request transfer of your personal data to another controller in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects.

Data Processing Principles

We adhere to the following GDPR principles:

  • Lawfulness, Fairness, and Transparency: We process data legally, fairly, and transparently
  • Purpose Limitation: We collect data for specified, explicit, and legitimate purposes
  • Data Minimization: We collect only data that is adequate, relevant, and necessary
  • Accuracy: We keep personal data accurate and up to date
  • Storage Limitation: We retain data only as long as necessary
  • Integrity and Confidentiality: We process data securely

International Data Transfers

If we transfer personal data outside Australia, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, please contact us at [email protected]

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within 72 hours as required by GDPR.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a written request to [email protected]. We will respond within 30 days of receiving your request.