GDPR Compliance Statement

Last Updated: September 3, 2026

Our Commitment to Data Protection

While our primary operations are based in Canada, we recognize that some clients may be subject to the European Union's General Data Protection Regulation. This statement outlines our compliance approach for individuals whose data is protected under GDPR.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity: Processing required to deliver requested diagnostic services
• Legitimate interest: Maintaining project archives and improving service quality
• Consent: For marketing communications and optional data collection
• Legal obligation: Compliance with applicable regulations and record-keeping requirements

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of such data.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete information.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, subject to our legal retention obligations.

Right to Restrict Processing

You may request limitation of processing under specific circumstances, such as when contesting data accuracy.

Right to Data Portability

You may request transfer of your personal data in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling systems that produce legal or similarly significant effects.

Data Retention

We retain personal data for seven years following project completion to maintain professional archives and support potential follow-up assessments. Data is securely deleted after this retention period unless extended retention is required by law.

International Data Transfers

Client data is stored on servers located in Canada. If data transfer to other jurisdictions becomes necessary for service delivery, we implement appropriate safeguards including standard contractual clauses approved by the European Commission.

Data Protection Officer

For GDPR-related inquiries or to exercise your data subject rights, contact our data protection representative at [email protected].

Supervisory Authority

If you believe our data processing violates GDPR, you have the right to lodge a complaint with the supervisory authority in your EU member state.

Changes to This Statement

We may update this compliance statement to reflect changes in our practices or regulatory requirements. Material changes will be communicated to affected individuals and posted on this website.