GDPR Compliance

Last Updated: September 11, 2026

Our Commitment to GDPR

maroon-glade.com is committed to protecting the privacy and personal data of all individuals, including those residing in the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) and related data protection laws to ensure your information is handled with the highest standards of care and transparency.

Data Controller Information

For the purposes of GDPR, the data controller is:

maroon-glade
427 Wellington Street West
Toronto, ON M5V 1E7
Canada
Email: [email protected]

Lawful Basis for Processing

Under GDPR, we process your personal data only when we have a lawful basis to do so. The legal grounds we rely on include:

Consent

When you provide explicit, informed consent for us to process your personal data for specific purposes, such as marketing communications or certain data collection activities. You have the right to withdraw your consent at any time.

Contract Performance

When processing is necessary to fulfill our contractual obligations to you, such as delivering the services you have requested or purchased.

Legitimate Interests

When we have legitimate business interests in processing your data, provided these interests do not override your fundamental rights and freedoms. Examples include improving our services, preventing fraud, and ensuring network security.

Legal Obligation

When processing is required to comply with applicable laws, regulations, court orders, or other legal requirements.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, along with information about how it is used.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.

Right to Restriction of Processing

You have the right to request that we limit the processing of your personal data under specific conditions, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests, including profiling and direct marketing activities.

Right to Withdraw Consent

When processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement occurred.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We will inform you of any such extension and the reasons for it.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication requirements
• Staff training on data protection principles
• Incident response procedures for data breaches

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements. These safeguards may include:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions recognizing that certain countries provide adequate data protection
• Binding corporate rules for transfers within multinational organizations

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. When determining retention periods, we consider:

• The nature and sensitivity of the personal data
• The purposes for which it is processed
• Legal and regulatory requirements
• Whether the purposes can be achieved through other means

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals without appropriate safeguards and human oversight.

Children's Data

We do not knowingly collect or process personal data from children under the age of sixteen without parental consent. If we become aware that we have collected such data, we will take steps to delete it promptly.

Updates to This Policy

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or direct notification where appropriate.

Contact Us

For questions, concerns, or to exercise your GDPR rights, please contact us:

maroon-glade
427 Wellington Street West
Toronto, ON M5V 1E7
Canada
Email: [email protected]