GDPR Compliance

Overview

The General Data Protection Regulation is a comprehensive data protection law that applies to individuals in the European Union and European Economic Area. While we are based in Canada, we recognize the importance of GDPR principles and apply similar standards of data protection to all users of our website and services.

Legal Basis for Processing

We process personal data only when we have a legal basis to do so. This includes processing based on your consent, fulfillment of contractual obligations, compliance with legal requirements, protection of vital interests, performance of tasks in the public interest, or pursuit of legitimate interests that do not override your fundamental rights.

Your Rights Under GDPR

If GDPR applies to you, you have specific rights regarding your personal data:

Right to Access: You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification: You can request correction of inaccurate or incomplete personal data.

Right to Erasure: You can request deletion of your personal data under certain circumstances.

Right to Restrict Processing: You can request that we limit how we use your personal data in specific situations.

Right to Data Portability: You can request to receive your personal data in a structured, commonly used format and have it transmitted to another controller.

Right to Object: You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant impacts.

Data Protection Officer

For questions about how we process your personal data or to exercise your rights under GDPR, you may contact us at [email protected].

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area. When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When personal data is no longer needed, it is securely deleted or anonymized.

Filing a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.