This statement explains how Brett Harmeling and Happy Life Labs comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR when processing personal data of individuals in the European Economic Area, the United Kingdom, and Switzerland.
1. Data controller
Brett Harmeling is the data controller for personal data collected through brettharmeling.com. Contact: privacy@brettharmeling.com.
2. Lawful bases
- Consent — for marketing communications and non-essential cookies.
- Contract — to deliver services you have requested.
- Legitimate interests — to operate, secure, and improve the Site, balanced against your rights.
- Legal obligation — to comply with applicable law.
3. Your rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with your local supervisory authority.
4. How to exercise your rights
Email privacy@brettharmeling.com with the subject line "GDPR Request". We will respond within 30 days. We may need to verify your identity before fulfilling the request.
5. International transfers
We are based in the United States. When transferring personal data outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
7. Supervisory authority
EU residents may contact their national data protection authority. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.