GDPR Compliance

General Data Protection Regulation

This page outlines how heath-lark.com complies with the General Data Protection Regulation (GDPR) when processing personal data of individuals in the European Economic Area.

Data Controller

For the purposes of GDPR, heath-lark.com acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contractual necessity: When processing is necessary to fulfill a contract or service request
• Legitimate interests: When processing serves our legitimate business interests and does not override your rights
• Legal obligation: When processing is required to comply with applicable laws

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request transfer of your data to another organization
• Right to object: Object to processing based on legitimate interests
• Rights related to automated decision-making: Protection against solely automated decision-making processes

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months and will inform you accordingly.

Data Processing Activities

We process personal data for the following purposes:

• Responding to service inquiries and consultations
• Managing client relationships and projects
• Website functionality and improvement
• Compliance with professional and legal obligations

Data Sharing and Transfers

Personal data may be shared with service providers who assist in website operation and business activities. These processors are bound by data protection agreements. We do not transfer data outside the European Economic Area without appropriate safeguards.

Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected. Client project data is typically retained for seven years in accordance with professional standards. Marketing consent data is reviewed annually.

Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encrypted data transmission and storage
• Access controls and authentication systems
• Regular security assessments
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours and inform affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. The relevant authority depends on your country of residence.

Cookies and Tracking

We use cookies and similar technologies as described in our Cookies Policy. You can control cookie preferences through browser settings or our cookie consent banner.

Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the information promptly.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through prominent website notices.

Contact Information

For questions about GDPR compliance or to exercise your rights, please contact us at [email protected].