GDPR information

Last updated: April 2026

Who this is for

This page is for people in the European Union, European Economic Area, and United Kingdom who use megaitservices.com.au or contact Mega IT Services (we, us). We are established in Australia. Our general privacy statement is in the Privacy policy; this page adds what the EU General Data Protection Regulation (GDPR) and UK GDPR expect us to tell you when we process your personal data in scope of those laws.

Controller

For personal data we process about you in connection with this website and your enquiries, the controller is Mega IT Services, L2, 11 York Street, Sydney NSW 2000, Australia. Email: info@megaitservices.com.au.

What we process and why

This matches our Privacy policy: contact details and messages you send, direct emails, and technical logs. Typical lawful bases under GDPR are: performance of steps at your request before a contract(responding to enquiries), legitimate interests (operating and securing the site, proportionate business development), and where required legal obligation. We do not sell your personal data.

Retention

We keep enquiry and email data only as long as needed for those purposes or as required by law, then delete or anonymise it in line with our internal practices described at a high level in the Privacy policy.

Transfers outside the EU/EEA/UK

We primarily store and process data in Australia. If personal data moves from the EEA, UK, or Switzerland to Australia or elsewhere, we put in place appropriate safeguards under Chapter V GDPR / UK GDPR where required — for example standard contractual clauses or other mechanisms recognised at the time.

Your rights

Depending on your situation, you may have the right to: access, rectify, erase, restrict processing, data portability, and object to processing based on legitimate interests. You may withdraw consent where processing is consent-based. You may lodge a complaint with a supervisory authority in your country. To exercise rights, contact us at the email above. We will respond within one month where GDPR or UK GDPR applies, unless we explain a lawful extension.

Automated decisions

We do not use this website to make solely automated decisions that produce legal or similarly significant effects on you.

Changes

We may update this page; the date at the top will change. Our Terms and conditions apply to use of the site.