GDPR Compliance

Last Updated: September 14, 2026

Introduction

This page outlines how we comply with the General Data Protection Regulation (GDPR) and explains your rights regarding personal data protection. While we are based in Canada, we respect the data protection rights of all individuals, including those in the European Union.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you submit information through our website forms, you provide consent for us to process that data for the stated purposes
• Legitimate Interests: To operate our website, respond to inquiries, and improve our services
• Legal Obligations: To comply with applicable laws and regulations

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your personal data in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

Also known as the "right to be forgotten," you can request that we delete your personal data under certain circumstances, such as when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the email address provided on our Contact page. Please include the following information in your request:

• Your full name
• The email address associated with your data
• A clear description of which right(s) you wish to exercise
• Any additional information that will help us locate your data

We will respond to your request within 30 days. If we need additional time, we will inform you of the reason for the delay.

Data Protection Officer

For questions or concerns about our data protection practices or to exercise your GDPR rights, you can contact us at the email address provided on our Contact page.

International Data Transfers

Your personal data is stored on servers located in Canada. If you are located in the European Union, please be aware that your data may be transferred to and processed in Canada, which may have different data protection laws than your home country.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Regular backups and disaster recovery procedures

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal data is no longer needed, we securely delete or anonymize it.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Data

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.

Changes to This Policy

We may update this GDPR compliance information periodically. We will notify you of any material changes by posting the updated information on this page with a revised "Last Updated" date.

Contact Information

For any questions about GDPR compliance or to exercise your rights, please contact us using the information provided on our Contact page.