GDPR Compliance

Our Commitment to GDPR

indigo-fell is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR). This page outlines how we handle data for individuals in the European Economic Area (EEA).

Data Controller

indigo-fell acts as the data controller for personal information collected through our website. Our contact details are:

indigo-fell
450 Granville Street, Suite 302
Vancouver, BC V6C 1V4
Canada
[email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you explicitly agree to data processing, such as subscribing to newsletters
• Contract: When processing is necessary for service delivery, such as vendor registrations
• Legitimate Interests: For website analytics and service improvement, balanced against your rights
• Legal Obligation: When required by applicable laws

Your Rights Under GDPR

If you are in the EEA, you have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You can request that we correct inaccurate personal data or complete incomplete data.

Right to Erasure

You can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You can request that we limit how we use your data while we address your concerns or verify accuracy.

Right to Data Portability

You can request a copy of your data in a structured, commonly used format to transfer to another service.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may ask for verification of your identity before processing your request.

International Data Transfers

As we are based in Canada, data may be transferred outside the EEA. Canada has been recognized by the European Commission as providing adequate protection for personal data. We also implement appropriate safeguards for any other international transfers.

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. When data is no longer needed, we securely delete or anonymize it.

Data Security

We implement technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in high risk, we will also notify affected individuals directly.

Supervisory Authority

If you are in the EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated effective date.

Contact Our Data Protection Team

For any questions or concerns about GDPR compliance or your data rights, please contact:

Data Protection Officer
indigo-fell
[email protected]