GDPR Compliance

Last updated: September 16, 2026

Data Protection Principles

We process personal data in accordance with applicable data protection regulations, including principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity.

Legal Basis for Processing

Personal data is processed based on:

• Consent: When you voluntarily submit information through our forms
• Legitimate interests: To respond to inquiries and provide requested services
• Contractual necessity: To fulfill service agreements

Data Subject Rights

Under GDPR and similar regulations, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure in certain circumstances
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Data Retention

Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

Inquiry data is typically retained for two years from the date of last contact. Active project data is retained for the duration of the engagement plus seven years for business record purposes.

International Data Transfers

Data may be processed and stored in Canada. Where data is transferred internationally, appropriate safeguards are implemented to ensure adequate protection.

Data Security Measures

We implement technical and organizational measures including encryption, access controls, regular security assessments, and staff training to protect personal data.

Automated Decision Making

We do not use automated decision making or profiling that produces legal or similarly significant effects.

Third Party Processing

Service providers who process data on our behalf are contractually bound to appropriate data protection standards and may only process data according to our instructions.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the information provided on our contact page. We will respond to requests within one month, or inform you if additional time is required.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority.