GDPR Compliance

Last Updated: September 14, 2026

Our Commitment

We are committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws, including PIPEDA.

Legal Basis for Processing

We process personal data based on:

Consent: When you voluntarily submit information through our forms
Contractual necessity: To fulfill service agreements
Legitimate interests: To improve our services and communicate relevant information

Data Subject Rights

Under GDPR and Canadian privacy legislation, you have the following rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure (right to be forgotten)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

Data Protection Measures

We implement appropriate technical and organizational security measures including encryption, access controls, and regular security assessments to protect personal data from unauthorized access, loss, or misuse.

International Data Transfers

Personal data is primarily stored and processed within Canada. Any international transfers are conducted in compliance with applicable data protection requirements and appropriate safeguards.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within the timeframes required by law.

Exercising Your Rights

To exercise any of your data protection rights, submit a request to [email protected]. We will respond within 30 days of receiving a valid request.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your local data protection authority.

Contact

For questions regarding GDPR compliance or data protection practices, contact us at [email protected].