Our commitment to data protection and privacy rights
Last Updated: September 14, 2026
beige-prairie is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines how we comply with GDPR requirements and explains your rights as a data subject.
For the purposes of GDPR, beige-prairie acts as the data controller for personal data collected through our website and during the provision of our services.
Contact details:
beige-prairie
250 University Avenue, Suite 1400
Toronto, ON M5H 3E5
Canada
Email: [email protected]
We process personal data based on one or more of the following legal bases:
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by up to two additional months, in which case we will notify you.
We may ask you to verify your identity before processing your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests.
As a Canadian organization, we may transfer personal data outside the EEA. When we do so, we ensure appropriate safeguards are in place to protect your data, such as:
Canada has been recognized by the European Commission as providing adequate protection for personal data, which facilitates lawful data transfers between the EEA and Canada.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. Our retention periods are determined based on:
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For individuals in the EU, this would be the data protection authority in your country of residence.
For any questions about our GDPR compliance or to exercise your rights, please contact us at:
beige-prairie
250 University Avenue, Suite 1400
Toronto, ON M5H 3E5
Canada
Email: [email protected]