GDPR Compliance
Last updated: September 14, 2026
Our Commitment to Data Protection
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. This page outlines how we handle your information and your rights under GDPR.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you voluntarily provide information through our contact forms
- Contract: When processing is necessary to provide services you have requested
- Legitimate Interest: For business operations and improving our services
- Legal Obligation: When required to comply with applicable laws
Your GDPR Rights
Under GDPR, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data, subject to legal retention requirements.
Right to Restrict Processing
You can request that we limit how we use your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format.
Right to Object
You can object to processing of your personal data based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Data Controller
For the purposes of GDPR, the data controller is:
gorge-crane
2847 Granville Street
Vancouver, BC V6H 3J4
Canada
Data Protection Officer
For questions about data protection or to exercise your rights, contact us at:
International Data Transfers
We primarily process data within Canada. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your information.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us with your request. We will respond within one month of receiving your request.
Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority.