Last Updated: September 14, 2026
emerald-basin.com is committed to protecting the privacy and personal data of all visitors and clients in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This document outlines our compliance measures and your rights under GDPR.
The data controller responsible for your personal information is:
emerald-basin
427 Wellington Street West
Toronto, ON M5V 1E7
Canada
Email: [email protected]
We process personal data only when we have a valid legal basis. The legal bases we rely on include:
We collect and process the following categories of personal data:
As a data subject, you have the following rights regarding your personal information:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data along with information about how we use it.
You may request correction of inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
You may request that we restrict processing of your personal data in specific situations, such as while we verify the accuracy of disputed data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. In some cases, we may request additional information to verify your identity before processing your request.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods include:
If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or transfers to countries with adequacy decisions.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Affected individuals will be informed without undue delay if the breach poses a high risk.
We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.
Our services are not directed to children under 16 years of age. We do not knowingly collect or process personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.
For questions regarding GDPR compliance or to exercise your data subject rights, please contact us at:
Email: [email protected]
Address: 427 Wellington Street West, Toronto, ON M5V 1E7, Canada