GDPR Compliance

Last updated: September 2024

Our Commitment to Data Protection

Nimble-sparrow is committed to ensuring compliance with the General Data Protection Regulation (GDPR) for visitors from the European Economic Area. This page outlines your rights under GDPR and how we fulfill our obligations.

Data Controller

Nimble-sparrow acts as the data controller for personal information collected through this website. Our contact details are:

Nimble-sparrow
147 Heritage Lane
Toronto, ON M5V 2T3
Canada
[email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent: When you submit an inquiry form, you consent to our processing of your data to respond to your request
Legitimate Interest: For website analytics and improvement, where this does not override your fundamental rights
Legal Obligation: When we are required to retain or disclose data by law

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access: You may request a copy of the personal data we hold about you
Right to Rectification: You may request correction of inaccurate or incomplete data
Right to Erasure: You may request deletion of your personal data in certain circumstances
Right to Restrict Processing: You may request that we limit how we use your data
Right to Data Portability: You may request transfer of your data to another service provider
Right to Object: You may object to processing based on legitimate interests
Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

International Data Transfers

As our business is based in Canada, data submitted through this website is stored and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, typically no longer than two years for inquiry data unless an ongoing business relationship exists.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These measures are regularly reviewed and updated.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. We encourage you to contact us first so we may address your concerns directly.

Updates to This Notice

This GDPR compliance notice may be updated periodically. The date at the top of this page indicates when it was last revised.