GDPR Compliance

Last updated: September 18, 2026

Our Commitment to Data Protection

As a service operating within the European Union, we are committed to full compliance with the General Data Protection Regulation (GDPR). We respect your privacy rights and handle your personal data with care and transparency.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you submit an inquiry form, you provide explicit consent for us to process your information to respond to your request
• Legitimate Interest: We have a legitimate interest in maintaining records of inquiries and communications for business continuity
• Contractual Necessity: If we enter into a service agreement, processing is necessary to fulfill our contractual obligations

Your Rights Under GDPR

Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured format and transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

Data Controller

The data controller responsible for your personal data is:
hyper-leaf
42 Merrion Square East
Dublin 2, D02 XF59
Ireland
Email: [email protected]

Data Protection Officer

For questions specifically related to data protection, you may contact our Data Protection Officer at [email protected].

Data Retention

We retain personal data only for as long as necessary:

• Inquiry data: 12 months from submission
• Client engagement data: Duration of engagement plus 24 months
• Cookie consent preferences: Until you clear browser data or withdraw consent

Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (SSL/TLS)
• Secure server infrastructure within the EU
• Access controls limiting who can view personal data
• Regular security assessments

International Data Transfers

Your data is stored on servers located within the European Union. We do not transfer personal data outside the EU/EEA.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Right to Lodge a Complaint

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority:

Data Protection Commission (Ireland)
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: dataprotection.ie

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within 30 days and may ask you to verify your identity before processing your request.