GDPR Compliance

Last updated: October 2026

Our Commitment to GDPR

Dapper-heath is committed to protecting the privacy and personal data of all our visitors and clients, including those located in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.

Data Controller Information

For the purposes of GDPR, Dapper-heath acts as the data controller for personal information collected through our website and consultation services:

Dapper-heath
245 Artisan Lane, Suite 12
Toronto, ON M5V 2K7
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent

When you submit an inquiry form or subscribe to communications, you provide consent for us to process your information for the specified purposes. You may withdraw consent at any time.

Contract Performance

We process personal data as necessary to provide consultation services you have requested. This includes communicating about your project, coordinating with artisans, and managing service delivery.

Legitimate Interests

We may process certain data based on our legitimate business interests, such as improving our services, maintaining security, and conducting business analytics. We balance these interests against your privacy rights.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

International Data Transfers

As a Canadian business, personal data from EEA visitors may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We implement appropriate safeguards for any transfers to ensure your data remains protected.

Data Retention

We retain personal data only as long as necessary for the purposes described in our Privacy Policy, or as required by law. Consultation records are typically retained for five years, after which they are securely deleted unless ongoing business relationships require longer retention.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS)
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

For requests related to GDPR or data protection concerns, please contact:

Dapper-heath
245 Artisan Lane, Suite 12
Toronto, ON M5V 2K7
Email: [email protected]

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence. We encourage you to contact us first so we can address your concerns directly.