GDPR Compliance

Introduction

This document outlines our commitment to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy legislation. We respect your privacy rights and are committed to transparent data handling practices.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing is necessary to provide the services you request and fulfill our contractual obligations
• Legitimate interests: Processing is necessary for our legitimate business interests, such as improving services and communicating with clients
• Consent: You have provided explicit consent for specific processing activities, such as marketing communications
• Legal obligations: Processing is required to comply with legal and regulatory requirements

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing and no overriding legitimate grounds exist.

Right to Restriction

You can request restriction of processing in certain circumstances, such as when you contest the accuracy of data or when processing is unlawful but you prefer restriction over erasure.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. In some cases, we may request additional information to verify your identity before processing your request.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by law. Appointment records are typically retained for three years for business continuity purposes. Marketing communications data is retained until consent is withdrawn.

International Data Transfers

Your personal data is processed and stored in Canada. If data is transferred outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with applicable privacy regulations.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Protection Officer

For questions regarding data protection or to exercise your rights, contact us at:

Email: [email protected]
Address: 847 Granville Street, Vancouver, BC V6Z 1K3, Canada

Supervisory Authority

You have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been violated. In Canada, this is the Office of the Privacy Commissioner of Canada.

Updates to This Document

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with a revised effective date.