GDPR Compliance
Last Updated: September 11, 2026
Our Commitment to Data Protection
tundra-moose is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract Performance: When processing is necessary to fulfill our service agreements with you
- Legitimate Interests: When processing is necessary for our legitimate business operations, provided your rights are not overridden
- Legal Obligations: When processing is required to comply with legal requirements
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You may request that we limit the processing of your personal data in specific situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Duration of service delivery plus a reasonable period for follow-up
- As required by legal, accounting, or reporting obligations
- To establish, exercise, or defend legal claims
After the retention period expires, personal data is securely deleted or anonymized.
International Data Transfers
Your personal data is processed primarily in Canada. If we transfer data outside Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
Data Protection Officer
For questions regarding data protection or to exercise your rights, please contact us at:
Email: [email protected]
Address: 428 Granville Street, Vancouver, BC V6C 1T2, Canada
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
How to Exercise Your Rights
To exercise any of your rights under GDPR, please contact us using the information provided above. We will respond to your request within one month, though this period may be extended by two additional months in complex cases.
We may require verification of your identity before processing requests to protect your personal data from unauthorized access.