GDPR Information

Your Rights Under GDPR

The General Data Protection Regulation grants you specific rights regarding your personal data. Even though we operate primarily in Canada, we respect these rights for all individuals who interact with our services.

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

If your personal information is inaccurate or incomplete, you can request that we correct it. We will do so promptly and notify any third parties to whom we have disclosed the information.

Right to Erasure

Also known as the right to be forgotten, you can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing.

This right is not absolute. We may need to retain certain information for legal compliance, establishment of legal claims, or other legitimate purposes.

Right to Restriction of Processing

You can request that we limit how we use your data in specific circumstances, such as when you contest the accuracy of the data or when you need the data preserved for legal claims.

Right to Data Portability

You can request that we provide your personal data in a structured, commonly used format and transmit it to another controller when technically feasible.

Right to Object

You can object to processing of your personal data when we rely on legitimate interests as our legal basis, or when we process data for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling in ways that produce legal or similarly significant effects. If this changes, we will provide appropriate information and safeguards.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill a contract we have with you
• Legal obligation: Processing is necessary to comply with legal requirements
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

Data Protection Officer

For questions about data protection or to exercise your rights, contact us at [email protected]. We will respond to requests within one month, though complex requests may require up to three months with explanation of the delay.

Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority in your country of residence or where an alleged infringement occurred.

International Data Transfers

When we transfer personal data outside of the European Economic Area, we ensure appropriate safeguards are in place through standard contractual clauses or other approved mechanisms.

How to Exercise Your Rights

To exercise any of these rights, send a request to [email protected]. Include sufficient information for us to verify your identity and understand your request. We do not charge fees for most requests, though we may charge reasonable fees for manifestly unfounded or excessive requests.