GDPR Compliance

Our Commitment

vesperflare is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals regarding their personal data. This page outlines how we meet GDPR requirements and your rights as a data subject.

Lawful Basis for Processing

We process personal data based on the following lawful grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill our service agreement with you
• Legal obligation: When we must process data to comply with legal requirements
• Legitimate interests: When processing is necessary for our legitimate business interests, balanced against your rights

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to be informed: Clear information about how we use your data
• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data in a structured format
• Right to object: Object to certain types of processing
• Rights related to automated decision-making: Protection against solely automated decisions

Exercising Your Rights

To exercise any of your rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. In some cases, we may extend this period by two additional months where requests are complex or numerous.

Data Protection Officer

For questions specifically about data protection and GDPR compliance, you can contact our data protection contact at [email protected]

International Data Transfers

We primarily process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also inform you directly without undue delay.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.

ICO Website: ico.org.uk

Updates to This Information

We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.