C
ClientLayers Home

GDPR Policy

Last updated: June 14, 2026

ClientLayers is committed to compliance with the EU General Data Protection Regulation (GDPR). This policy summarizes the rights you have as a data subject and how we handle your personal data.

1. Data Controller

ClientLayers acts as the data controller for personal data you provide directly through our website and as a data processor for personal data handled on behalf of our clients.

2. Your Rights Under GDPR

  • Right of access — request a copy of your personal data.
  • Right to rectification — ask us to correct inaccurate data.
  • Right to erasure — request deletion of your data ("right to be forgotten").
  • Right to restrict processing — limit how we use your data.
  • Right to data portability — receive your data in a machine-readable format.
  • Right to object — including to direct marketing.
  • Right to lodge a complaint — with your local supervisory authority.

3. Lawful Bases

We process personal data on one of these bases: consent, contract, legal obligation, vital interests, public task, or legitimate interests.

4. Data Processing Agreement (DPA)

Business clients can request a Data Processing Agreement covering data we process on their behalf. Email dpo@clientlayers.com for the latest template.

5. International Transfers

Where data is transferred outside the EU/EEA, we rely on adequacy decisions or Standard Contractual Clauses, with appropriate technical and organizational safeguards.

6. Security Measures

  • Encryption in transit (TLS) and at rest where applicable.
  • Role-based access control and least-privilege principles.
  • Regular backups and disaster-recovery testing.
  • Vendor security review for any subprocessor.

7. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours, and affected individuals without undue delay.

8. Submitting a Request

To exercise any GDPR right, email dpo@clientlayers.com with the subject "GDPR Request". We will respond within 30 days.