GDPR Compliance

General Data Protection Regulation Compliance Statement

Our Commitment

Storm-ferret is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process your personal data based on:

  • Your consent when you submit forms or accept cookies
  • Contract performance when providing services you've requested
  • Legitimate interests in improving our services and communicating with clients

Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent at any time

Data We Collect

We collect only the personal data necessary to provide our services:

  • Contact information (name, email address)
  • Service preferences and project details
  • Communication records related to your project

Data Protection Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Access controls limiting who can view your information
  • Regular security assessments and updates
  • Staff training on data protection procedures

International Data Transfers

Your data is primarily stored and processed in Canada. If we transfer data outside of your jurisdiction, we ensure appropriate safeguards are in place to protect your information.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, typically for the duration of our business relationship and for a reasonable period afterward as required by law or legitimate business needs.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

Contact Information

For questions about our GDPR compliance or to exercise your rights, contact us at [email protected].