Your data protection rights under GDPR
Last Updated: August 2026
The General Data Protection Regulation (GDPR) is a European Union regulation that governs how personal data of EU residents must be handled. Although Dapper Iris is based in South Africa, we are committed to protecting the privacy of all our visitors and customers, including those from the European Economic Area (EEA).
This page outlines how we comply with GDPR requirements and explains your rights under this regulation.
For the purposes of GDPR, Dapper Iris acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 45 Craft Lane, Rosebank, Johannesburg, 2196, South Africa
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or significantly affect you. We do not currently engage in automated decision-making.
To exercise any of your rights, please contact us using the details provided below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month.
There is no fee required for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
As we are based in South Africa, any personal data collected from EEA residents may be transferred to and processed in South Africa. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, including the use of standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods vary based on the type of data and the purpose of processing. When data is no longer required, we securely delete or anonymise it.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including measures to prevent unauthorised access, alteration, disclosure, or destruction of personal data.
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
For any questions regarding GDPR compliance or to exercise your data protection rights, please contact us:
Email: [email protected]
Address: 45 Craft Lane, Rosebank, Johannesburg, 2196, South Africa