GDPR Compliance

Last updated: August 2026

This page provides additional information for visitors from the European Economic Area (EEA) regarding our compliance with the General Data Protection Regulation (GDPR).

Data Controller

leaf-mink acts as the data controller for personal information collected through this website.

Contact details:
leaf-mink
47 Heritage Lane
Cape Town, 8001
South Africa
[email protected]

Legal Basis for Processing

Under GDPR, we process personal data based on one or more of the following legal bases:

Consent (Article 6(1)(a))

We obtain your consent before:

• Setting non-essential cookies
• Sending marketing communications
• Processing special categories of data

You may withdraw consent at any time by contacting us.

Contractual Necessity (Article 6(1)(b))

We process data necessary to:

• Respond to service enquiries
• Process bookings and registrations
• Provide requested services

Legitimate Interests (Article 6(1)(f))

We process data for legitimate business interests including:

• Website analytics and improvement
• Security and fraud prevention
• Business administration

Your Rights Under GDPR

If you are in the EEA, you have the following rights:

Right of Access (Article 15)

You may request a copy of the personal data we hold about you.

Right to Rectification (Article 16)

You may request correction of inaccurate or incomplete data.

Right to Erasure (Article 17)

You may request deletion of your data in certain circumstances.

Right to Restriction (Article 18)

You may request that we limit how we use your data.

Right to Data Portability (Article 20)

You may request your data in a structured, machine-readable format.

Right to Object (Article 21)

You may object to processing based on legitimate interests.

Rights Related to Automated Decision-Making (Article 22)

We do not make automated decisions with legal or similarly significant effects.

International Data Transfers

As we are based in South Africa, transfers of personal data from the EEA constitute international transfers. We ensure appropriate safeguards through:

• Standard contractual clauses approved by the European Commission
• Binding corporate rules where applicable
• Compliance with adequacy decisions

Data Retention

We retain personal data only for as long as necessary for the purposes described in our Privacy Policy, unless a longer retention period is required by law.

Complaints

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with a supervisory authority in your country of residence.

Data Protection Officer

For GDPR-related enquiries, contact:
[email protected]
Subject line: GDPR Enquiry

Updates to This Information

We may update this GDPR information to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.