Data protection for visitors from the European Economic Area
The General Data Protection Regulation (GDPR) applies to the processing of personal data of individuals located in the European Economic Area (EEA). Although brave-branch primarily operates in Canada and serves Canadian businesses, we respect the data protection rights of all visitors, including those from the EEA.
For the purposes of GDPR, the data controller is:
brave-branch
350 Bay Street, Suite 1200
Toronto, Ontario M5H 2S6
Canada
Email: [email protected]
When processing personal data of EEA residents, we rely on the following legal bases under Article 6 of the GDPR:
Where you have given clear consent for us to process your personal data for specific purposes, such as submitting an inquiry form or accepting analytics cookies.
Processing necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
Processing necessary for our legitimate interests, where those interests are not overridden by your rights. This includes:
If you are located in the EEA, you have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data.
You may request correction of inaccurate personal data or completion of incomplete data.
You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose.
You may request limitation of processing in certain situations, such as when you contest data accuracy.
You may request your personal data in a structured, machine-readable format for transfer to another controller.
You may object to processing based on legitimate interests, including direct marketing.
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond to requests within one month. In complex cases, we may extend this period by two additional months, with notification.
We may request verification of your identity before processing requests to protect your personal data from unauthorized access.
As a Canadian company, your personal data will be transferred to and processed in Canada. Canada has received an adequacy decision from the European Commission, recognizing that Canadian law provides adequate protection for personal data transferred from the EEA.
Where we use service providers in other countries, we implement appropriate safeguards such as Standard Contractual Clauses to protect transferred data.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods are detailed in our Privacy Policy.
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Our services are directed to businesses and we do not knowingly collect personal data from individuals under 16 years of age. If we become aware that we have collected data from a child without appropriate parental consent, we will delete it promptly.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence or place of work.
We may update this GDPR information page to reflect changes in our practices or legal requirements. Material changes will be posted with an updated date.
For GDPR-related inquiries:
Data Protection Contact
brave-branch
350 Bay Street, Suite 1200
Toronto, Ontario M5H 2S6
Canada
Email: [email protected]