GDPR Compliance

Scope and Applicability

While our business operates primarily in Canada, we recognize that visitors from the European Economic Area may access our website and submit booking inquiries. This page outlines how we comply with GDPR requirements for EEA residents.

If you are located in the EEA and interact with our website, you are entitled to specific rights and protections under GDPR.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity: Processing your booking request and providing expedition services requires your contact information and expedition preferences.
• Legitimate interests: We maintain server logs and basic analytics to ensure website security and functionality.
• Legal obligation: We retain certain records to comply with Canadian business and tax regulations.
• Consent: Where applicable, we obtain explicit consent for optional data processing activities.

Your GDPR Rights

As an EEA resident, you have the following rights:

• Right to access: Request a copy of all personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete information.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: Request limitation of how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request.

Data Transfers

Your personal data is stored on servers located in Canada. While Canada has not received an adequacy decision from the European Commission, we implement appropriate safeguards to protect your information in accordance with GDPR standards.

By submitting a booking request from the EEA, you acknowledge and consent to the transfer of your data to Canada for processing.

Data Retention

We retain booking-related personal data for seven years to comply with Canadian business record requirements. Technical logs and analytics data are retained for a maximum of 24 months. You may request earlier deletion, though we may need to retain certain information to fulfill legal obligations.

Data Protection Officer

Due to the nature and scale of our operations, we are not required to appoint a dedicated Data Protection Officer. Privacy-related inquiries should be directed to [email protected].

Automated Decision-Making

We do not use automated decision-making or profiling processes that produce legal effects or similarly significantly affect you.

Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with GDPR requirements. For EEA residents, you can contact the data protection authority in your country of residence.

We encourage you to contact us first at [email protected] so we can address your concerns directly.