GDPR Compliance

Last updated: 1 September 2026

Overview

dapper-star is committed to full compliance with the General Data Protection Regulation (GDPR) in all data processing activities. This page outlines how we handle personal data in accordance with GDPR principles.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you voluntarily submit information through contact forms or subscribe to communications.
• Legitimate interests: For analytics and website improvement purposes, where such processing does not override your fundamental rights.
• Contractual necessity: When processing is necessary to fulfil consulting services you have requested.

Data Protection Principles

We adhere to the following GDPR principles:

• Lawfulness, fairness, and transparency in all data processing
• Purpose limitation – data is collected only for specified, legitimate purposes
• Data minimisation – we collect only what is necessary
• Accuracy – we keep data up to date and correct errors promptly
• Storage limitation – data is retained only as long as necessary
• Integrity and confidentiality – appropriate security measures protect your data

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data in certain circumstances.
• Right to restriction of processing: Request that we limit how we use your data.
• Right to data portability: Request transfer of your data to another organisation.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making: We do not engage in automated decision-making or profiling.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with details of your request. We will respond within one month of receiving your request. If your request is complex or we receive multiple requests, we may extend this period by up to two months and will notify you accordingly.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom or European Economic Area. If such transfers become necessary for service provision, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Protection Officer

For questions about GDPR compliance or data protection matters, contact [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, if you believe your data has been processed unlawfully. Visit ico.org.uk for more information.