GDPR Compliance Statement

Happy Whole Human® processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

We collect and process personal data only where there is a lawful basis to do so, including performance of a contract, user consent, legal obligation, or legitimate interests, balanced against individual rights and freedoms.

Personal data is:
 

• Collected for specific, explicit, and legitimate purposes

• Limited to what is necessary for those purposes

• Stored securely and protected against unauthorized access

• Retained only as long as necessary to fulfill contractual, legal, or regulatory obligations

Lawful Bases for Processing (Article 6)
We process personal data based on one or more of the following:

• Consent (which may be withdrawn at any time)

• Performance of a contract

• Compliance with legal obligations

• Legitimate interests, where such interests do not override individual rights
   

Data Subject Rights (Articles 12–23)

Where applicable, individuals have the right to:
 

• Access their personal data

• Rectify inaccurate or incomplete data

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time
   

Requests may be submitted to contact@happywholehuman.com. We respond in accordance with GDPR timelines.

Data Processors & Transfers (Articles 28 & 44)
Happy Whole Human® works with third-party service providers acting as data processors under contractual confidentiality and data protection obligations.
Where personal data is transferred outside the European Union, appropriate safeguards are implemented in accordance with GDPR requirements.

AI & Automated Processing (Article 22)
Happy Whole Human® does not engage in solely automated decision-making that produces legal or similarly significant effects on individuals.

AI-enabled features are used to support reflection and learning only and do not replace human judgment. Identifiable personal data is not used to train AI models without explicit consent.