GDPR Compliance

General Data Protection Regulation Compliance

While spry zone operates primarily in Canada, we recognize and respect the data protection rights of individuals in the European Union and European Economic Area. This page outlines our commitment to GDPR principles.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide information through forms or communications
• Contract Performance: To fulfill obligations under service agreements
• Legitimate Interest: To operate our business and communicate about services you've expressed interest in
• Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

If you are an EU or EEA resident, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations.

Right to Restriction

You can request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You may request your personal data in a structured, commonly used format to transfer to another service provider.

Right to Object

You can object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Data Protection Officer

For questions about data protection or to exercise your rights, contact us at [email protected] with "GDPR Request" in the subject line.

Data Transfers

Personal data may be transferred to and processed in Canada. We ensure appropriate safeguards are in place for international data transfers in accordance with GDPR requirements.

Data Security

We implement technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication requirements
• Employee training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing of your personal data violates GDPR.

Updates to This Policy

We may update our GDPR compliance practices and this page accordingly. Material changes will be communicated through our website.

Contact Information

spry zone
428 Cordova Street West
Vancouver, BC V6B 1E4
Canada
Email: [email protected]