GDPR Compliance

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for processing your personal data for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legal obligation: We must process your data to comply with legal requirements
• Legitimate interests: Processing serves our legitimate business interests while respecting your rights

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes collected or when you withdraw consent.

Right to Restriction

You can request limitation of processing in certain circumstances, such as when you contest data accuracy.

Right to Data Portability

You can receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 742 Wilderness Trail Avenue, Vancouver, BC V6B 2K9, Canada

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our designated data protection contact at the email address provided above.

International Data Transfers

When we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Complaint Rights

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.