GDPR Compliance

Our Commitment to Data Protection

Lagoon-bison is committed to protecting the personal data of all individuals who interact with our website and services. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

For the purposes of data protection legislation, the data controller is:

Lagoon-bison
127 Artisan Lane
Vancouver, BC V6B 2K4
Canada
Email: [email protected]

Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service if the request is excessive or unfounded.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly where we process data based on legitimate interests.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, unless overridden by your rights
• Legal Obligation: Processing is necessary to comply with the law

International Data Transfers

As we are based in Canada, your information may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data.

When we transfer data to other jurisdictions, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are:

• Contact inquiries: 24 months from last interaction
• Workshop bookings and customer records: 36 months
• Marketing preferences: Until consent is withdrawn
• Website analytics: 26 months

Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit using SSL/TLS
• Regular security assessments
• Access controls and authentication procedures
• Employee training on data protection

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours where feasible
• Communicate the breach to affected individuals when required
• Document all breaches and remedial actions taken

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Exercising Your Rights

To exercise any of your rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. This period may be extended by two months where necessary, taking into account the complexity and number of requests.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.

Changes to This Notice

We may update this GDPR compliance notice from time to time. We will notify you of any significant changes by posting a prominent notice on our website.

Contact Us

For any questions about this notice or our data protection practices:

Email: [email protected]
Address: 127 Artisan Lane, Vancouver, BC V6B 2K4, Canada