GDPR Information

Last updated: January 2024

Introduction

While Prime Egret is a Canadian company primarily serving Canadian clients, we recognize that visitors from the European Economic Area (EEA) may access our website. This page provides additional information about your rights under the General Data Protection Regulation (GDPR) for those visitors.

Data Controller

Prime Egret acts as the data controller for personal information collected through our website. Our contact information is:

Prime Egret
245 Bay Street, Suite 800
Toronto, ON M5J 2L5
Canada

Email: [email protected]

Legal Basis for Processing

Under the GDPR, we process personal data based on the following legal grounds:

• Consent - When you explicitly agree to the processing, such as accepting cookies or submitting a contact form
• Contract - When processing is necessary to fulfill a service agreement with you
• Legitimate Interests - When we have a legitimate business reason for processing, such as improving our services or preventing fraud, provided this does not override your fundamental rights
• Legal Obligation - When we are required by law to process certain data

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR. In complex cases, we may extend this period by an additional two months, and we will inform you if this is necessary.

We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, but we may charge a reasonable fee or refuse a request if it is manifestly unfounded or excessive.

International Data Transfers

As a Canadian company, your personal data may be transferred to and stored in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. However, for any data transferred outside of adequacy decisions, we implement appropriate safeguards such as standard contractual clauses.

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law. Our retention periods are based on business needs, legal requirements, and the nature of the data.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside, work, or where the alleged infringement occurred.

Updates

We may update this GDPR information page from time to time. Any changes will be posted on this page with an updated revision date.

Contact

For any questions regarding GDPR or data protection, please contact our privacy team at [email protected].