Our commitment to protecting your data rights under the General Data Protection Regulation.
Last Updated: September 2026
bamboo-signal is committed to compliance with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area (EEA). This page outlines how we ensure compliance and the rights available to you.
When you provide personal information to bamboo-signal through our website or services, we act as the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with applicable data protection laws.
Under GDPR, we must have a valid legal basis to process your personal data. We rely on the following legal bases:
When you actively consent to processing, such as when you submit a contact form or accept cookies. You may withdraw consent at any time by contacting us.
When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as providing our coaching services.
When processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights. Examples include improving our services and communicating with you about relevant offerings.
When processing is necessary to comply with a legal obligation, such as tax reporting requirements or responding to valid legal requests.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request correction of inaccurate personal data or completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
To exercise any of these rights, please contact us using the information provided below. We will respond to your request within one month. In complex cases or if we receive many requests, we may extend this period by an additional two months, but we will inform you of any extension within the first month.
We may ask you to verify your identity before processing your request to ensure we protect your data from unauthorized access.
As a Canadian organization, data you provide may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to other jurisdictions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. The specific retention period depends on the type of data and the purpose of processing. When data is no longer needed, we securely delete or anonymize it.
We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures are regularly reviewed and updated as necessary.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority. However, we encourage you to contact us first so we can try to resolve your concerns directly.
For questions about GDPR compliance or to exercise your data protection rights, please contact us at:
bamboo-signal
Data Protection Contact
45 Wellington Street West, Suite 302
Toronto, ON M5J 2N7
Canada
Email: [email protected]