We use cookies to enhance your browsing experience and analyze our traffic. By clicking "Accept", you consent to our use of cookies.

orchard-forge
Home About Services Contact Advertising Content

GDPR Compliance

Last Updated: June 17, 2026

This document outlines how orchard-forge.com complies with the General Data Protection Regulation (GDPR) and explains your rights regarding the processing of your personal data.

Our Commitment to Data Protection

We are committed to protecting your personal data and respecting your privacy rights. We process personal information in accordance with applicable data protection laws, including the GDPR where applicable to our operations.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for us to process your information for specific purposes
  • Contract Performance: When processing is necessary to fulfill our rental services and contractual obligations
  • Legitimate Interests: When we have a legitimate business interest, such as improving our services or preventing fraud
  • Legal Obligation: When we must process your data to comply with legal requirements

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a clear and accessible format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data when we rely on legitimate interests as the legal basis for processing. You also have the absolute right to object to processing for direct marketing purposes.

Right to Withdraw Consent

When we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.

To exercise any of these rights, please contact us at:

Email: [email protected]
Subject line: "GDPR Data Request"

We will respond to your request within one month of receipt, as required by GDPR regulations.

Data Minimization and Purpose Limitation

We collect only the personal data necessary to provide our services and fulfill our legitimate business purposes. We do not process your data for purposes incompatible with those for which it was originally collected.

Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Employee training on data protection practices
  • Incident response procedures

International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Retention periods vary depending on the type of data and the purpose of processing:

  • Reservation inquiries: Retained for up to 24 months after the last interaction
  • Active rental agreements: Retained for the duration of the agreement plus 7 years for legal and tax purposes
  • Marketing communications: Retained until you withdraw consent or object to processing

Automated Decision-Making

We do not use automated decision-making processes, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Third-Party Processors

When we engage third-party service providers to process personal data on our behalf, we ensure they provide appropriate guarantees regarding the security and confidentiality of your data through written contracts that comply with GDPR requirements.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR regulations.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of any material changes through our website or direct communication where appropriate.

Contact Information

For questions about our GDPR compliance or to exercise your data protection rights, please contact:

Email: [email protected]
Address: Level 12, 95 Pitt Street, Sydney NSW 2000, Australia

orchard-forge

Premium executive vehicle rental services in Sydney, Australia.

Quick Access

  • Home
  • About
  • Services
  • Contact

Legal Information

  • Privacy Policy
  • Terms of Use
  • GDPR Compliance
  • Cookies Policy

Business Details

orchard-forge.com

© 2026 orchard-forge. All rights reserved.