GDPR Compliance

Our Commitment to Data Protection

lush forge is committed to protecting the personal data of all individuals who interact with our website and services. Although we are based in Canada, we recognize the importance of the General Data Protection Regulation (GDPR) and extend its protections to visitors from the European Economic Area (EEA).

This page outlines our approach to GDPR compliance and explains your rights as a data subject.

Data Controller Information

For the purposes of applicable data protection laws, lush forge is the data controller responsible for your personal data. Our contact details are:

lush forge
100 Network Drive, Suite 450
Toronto, ON M5V 2Y1
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.

Your Rights Under GDPR

If you are located in the EEA, you have certain rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Exercising Your Rights

To exercise any of your rights, please contact us using the contact details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

If you are not satisfied with our response or believe we are processing your data in violation of applicable law, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.

International Data Transfers

As we are based in Canada, any personal data you provide may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We ensure that any transfers of personal data outside Canada comply with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for which it was collected, and legal requirements.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.

Updates to This Policy

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact Us

If you have questions about our GDPR compliance or wish to exercise your rights, please contact us at:

lush forge
100 Network Drive, Suite 450
Toronto, ON M5V 2Y1
Canada
Email: [email protected]