GDPR Compliance
Your data protection rights under European Union regulations
Last updated: January 2024
Our Commitment to GDPR
Crabbier Lead is committed to protecting the personal data of all individuals, including those residing in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and your rights under this regulation.
Data Controller
For the purposes of GDPR, Crabbier Lead acts as the data controller for personal information collected through our website and services.
Contact: [email protected]
Address: 247 Maple Street, Toronto, ON M5V 2T6, Canada
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you voluntarily provide information through our booking form or contact us
- Contract Performance: To fulfill appointment bookings and provide requested services
- Legitimate Interests: To improve our services and website functionality, where such interests do not override your fundamental rights
- Legal Obligation: To comply with applicable laws and regulations
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving your request.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction. We will address your request promptly.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You may request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You may object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Right to Withdraw Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Data Transfers
As we are located in Canada, personal data may be transferred outside the EEA. Canada has been recognized by the European Commission as providing adequate protection for personal data. We ensure appropriate safeguards are in place for any other international transfers.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Specific retention periods are outlined in our Privacy Policy.
Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days. You may also lodge a complaint with a supervisory authority if you believe your rights have been violated.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.