Last Updated: January 2024
Petal-seal is committed to protecting the personal data of all individuals, including those located in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and your rights under this regulation.
Who We Are
Petal-seal is the data controller for personal information collected through our website and services. Our contact information is:
Petal-seal
456 Rue Notre-Dame Ouest, Suite 302
Montreal, QC H2Y 1T9
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR:
Consent
Where you have given us explicit consent to process your data for specific purposes, such as receiving marketing communications or allowing non-essential cookies.
Contractual Necessity
Processing necessary to fulfill our contractual obligations to you, such as providing services you have requested or responding to inquiries.
Legitimate Interests
Processing necessary for our legitimate business interests, such as improving our services and website functionality, provided these interests do not override your fundamental rights.
Legal Obligations
Processing necessary to comply with legal requirements, such as maintaining financial records or responding to lawful requests from authorities.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data violates GDPR.
How to Exercise Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two additional months, in which case we will inform you of the extension and reasons.
We may request verification of your identity before processing your request to protect your data from unauthorized access.
Data We Collect
We collect and process the following categories of personal data:
- Identity information (name)
- Contact information (email address, postal address)
- Service-related information (property details, project descriptions)
- Technical data (IP address, browser type, device information)
- Usage data (pages visited, features used)
International Transfers
As we are based in Canada, personal data collected from EEA residents may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods include:
- Service records: 7 years
- Marketing preferences: Until consent is withdrawn
- Website analytics: 26 months
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit
- Secure storage systems
- Access controls and authentication
- Regular security assessments
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
For questions about GDPR compliance or to exercise your rights, please contact:
Petal-seal
456 Rue Notre-Dame Ouest, Suite 302
Montreal, QC H2Y 1T9
Canada
Email: [email protected]