GDPR Compliance Statement

Last Updated: September 29, 2026

Our Commitment to Data Protection

Ravine-tapir is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian data protection legislation. This document outlines how we comply with these regulations and your rights regarding your personal information.

Legal Basis for Processing

We process personal data only when we have a legal basis to do so:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
  • Legal Obligation: Processing is necessary to comply with legal requirements
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override these interests

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization, or directly to you, under certain conditions.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Providing services you have requested
  • Maintaining business records
  • Complying with legal, tax, or regulatory requirements

When data is no longer required, we securely delete or anonymize it.

Data Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

  • Encryption of data in transit and at rest
  • Access controls limiting who can view personal data
  • Regular security assessments
  • Staff training on data protection practices
  • Incident response procedures

International Data Transfers

If we transfer personal data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by relevant authorities
  • Transfers to countries with adequate data protection frameworks
  • Other legally recognized transfer mechanisms

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify relevant supervisory authorities within 72 hours of becoming aware
  • Notify affected individuals without undue delay if the breach poses a high risk
  • Document the breach and our response

Automated Decision Making

We do not use automated decision-making processes or profiling that produce legal effects or similarly significantly affect individuals.

Children's Data

Our services are not directed at children under 16. We do not knowingly collect or process personal data from children. If you believe we have collected data from a child, please contact us immediately.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]

Address: 427 Laurier Avenue West, Ottawa, Ontario K1R 7Y2, Canada

We will respond to requests within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

  • The Office of the Privacy Commissioner of Canada
  • Your local data protection supervisory authority

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or direct notification.