GDPR Compliance

Last Updated: June 5, 2026

1. Our Commitment to Data Protection

While garnet-cliff.tech is a Canadian company primarily serving Canadian clients, we recognize that individuals from the European Economic Area (EEA) may visit our website. We respect the General Data Protection Regulation (GDPR) and are committed to handling personal data of EEA residents in compliance with applicable data protection standards.

2. Legal Basis for Processing

When we process personal data of EEA residents, we do so based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
  • Legal Obligation: Processing is necessary for compliance with legal obligations
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

3. Your GDPR Rights

If you are a resident of the EEA, you have the following rights regarding your personal data:

3.1 Right of Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

3.2 Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

3.3 Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.

3.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

3.5 Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

3.6 Right to Object

You have the right to object to processing of your personal data under certain conditions.

3.7 Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.

4. Data Controller Information

For the purposes of GDPR, the data controller is:

garnet-cliff.tech
1247 Granville Street
Vancouver, BC V6Z 1M7
Canada
Email: [email protected]

5. Data Protection Officer

Given the scale and nature of our operations, we have not appointed a dedicated Data Protection Officer. Privacy inquiries should be directed to the contact information provided above.

6. International Data Transfers

If you are located in the EEA and submit personal information through our website, your data will be transferred to Canada. Canada is recognized by the European Commission as providing adequate protection for personal data. We implement appropriate safeguards to protect your information.

7. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy:

  • Contact form submissions: Retained until purpose is fulfilled or you request deletion
  • Project correspondence: Typically retained for seven years for business records
  • Website analytics: Aggregated and anonymized after 26 months

8. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit using SSL/TLS protocols
  • Access controls limiting who can view personal data
  • Regular security assessments and updates
  • Staff training on data protection principles

9. Cookies and Tracking

We use cookies and similar tracking technologies. You can manage cookie preferences through our cookie banner or your browser settings. For detailed information, see our Cookies Policy.

10. Withdrawing Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

11. Lodging a Complaint

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority in the EEA country where you live, work, or where an alleged infringement occurred.

12. Updates to This Policy

We may update this GDPR compliance statement from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

13. Contact for Data Subject Requests

To exercise any of your GDPR rights or if you have questions about how we process your personal data, please contact us at:

Email: [email protected]
Subject Line: GDPR Data Subject Request

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months, in which case we will inform you of the extension and reasons for delay.