GDPR Compliance Information

Our Commitment to Data Protection

We are committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This page outlines how we comply with GDPR requirements and explains your rights regarding your personal information.

Legal Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary to fulfill a contract with you or take steps at your request before entering into a contract
• Legal Obligation: When we must process your data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request confirmation of whether we process your personal data and to access that data. We will provide you with a copy of your personal data in a structured, commonly used format.

Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request restriction of processing your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected] with the following information:

• Your full name and contact information
• A clear description of the right you wish to exercise
• Sufficient information to identify your personal data in our systems

We will respond to your request within one month. In complex cases, we may extend this period by two additional months, and we will inform you of any such extension.

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes only
• Data Minimization: We collect only data that is adequate, relevant, and limited to what is necessary
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
• Storage Limitation: We retain data only as long as necessary for the purposes for which it was collected
• Integrity and Confidentiality: We implement appropriate security measures to protect personal data

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response and breach notification procedures

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-organizational transfers

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report the breach to the relevant supervisory authority within 72 hours of becoming aware of it, where required by law.

Data Protection Officer

For questions specifically related to data protection and privacy, you may contact our data protection team at:

Email: [email protected]

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement if you believe our processing of your personal data violates applicable law.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

Updates to This Information

We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated information on our website.

Contact Information

For questions about GDPR compliance or to exercise your data protection rights, please contact us at:

Email: [email protected]
Address: 427 Laurier Avenue West, Ottawa, ON K1R 7Y2, Canada