Overview
If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and describes your rights regarding personal data.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for us to process your information, such as when submitting a contact form
- Contract: When processing is necessary to fulfill a service agreement with you
- Legitimate Interests: When we have legitimate business interests that do not override your data protection rights
- Legal Obligation: When we must process data to comply with legal requirements
Your GDPR Rights
Under GDPR, you have the following rights:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You have the right to request restriction of processing your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly when processing is based on legitimate interests.
Right to Data Portability
You have the right to request transfer of your data to another organization or directly to you under certain conditions.
Right to Withdraw Consent
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Data Protection Officer
For questions specifically related to data protection and GDPR compliance, you may contact our data protection representative at [email protected].
International Data Transfers
We are based in Canada. If you are located in the EEA and we transfer your data outside the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Automated Decision Making
We do not use automated decision-making or profiling in ways that produce legal effects or similarly significantly affect you.
Data Breach Notification
In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.
Contact Information
For any questions regarding GDPR compliance or to exercise your rights:
Email: [email protected]
Address: 225 King Street West, Suite 1200, Toronto, Ontario M5V 3M2, Canada
Updates to This Information
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.