GDPR Compliance Statement

Last Updated: August 13, 2026

General Data Protection Regulation (GDPR)

mesa-verse is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

mesa-verse operates as the data controller for personal information collected through this website.

Contact details:
Email: [email protected]
Address: Level 7, 142 Collins Street, Melbourne VIC 3000, Australia

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill service agreements
• Legitimate Interests: When we have legitimate business interests that do not override your rights
• Legal Obligation: When required to comply with legal requirements

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for its original purpose.

Right to Restriction of Processing

You may request limitation of how we use your personal data in specific situations.

Right to Data Portability

You may request transfer of your personal data to another organization in a structured, commonly used format.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

Data Processing Activities

We collect and process the following categories of personal data:

• Identity data (name)
• Contact data (email address)
• Service inquiry data (selected services, consultation requests)
• Technical data (IP address, browser information, usage patterns)

Data Recipients

Your personal data may be shared with:

• Service providers who support our operations (hosting, analytics)
• Professional advisors when necessary
• Regulatory authorities when required by law

International Data Transfers

If we transfer your data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, typically:

• Inquiry data: 3 years from last contact
• Service agreement data: 7 years after contract completion
• Marketing consent: Until consent is withdrawn

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended for complex requests.

Updates to This Statement

We may update this GDPR compliance statement periodically. Significant changes will be communicated through our website.