Last updated: August 26, 2026
While our primary operations are based in Canada, we recognize that visitors from the European Economic Area (EEA) may access our website and submit inquiries. We extend GDPR-level protections to all users regardless of location.
We process personal data under the following legal bases:
If you are located in the EEA, you have the following rights:
You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information in a commonly used electronic format.
You may request correction of inaccurate or incomplete personal data we hold about you. We will update records promptly upon verification.
You may request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when you object to processing. This right is subject to legal retention requirements.
You may request that we limit how we use your data in specific circumstances, such as when you contest the accuracy of the data or object to processing.
You may request that we transfer your data to another service provider in a structured, machine-readable format where technically feasible.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.
To exercise any of these rights, contact us at info at petal-dolphin.com with the subject line "GDPR Request." Include sufficient information to identify your records and specify which right you wish to exercise.
We will respond to valid requests within one month. Complex requests may require up to three months, in which case we will notify you of the extension and explain the reasons.
Our servers and data storage are located in Canada. If you are located in the EEA, your personal data will be transferred outside the European Economic Area. We ensure such transfers comply with GDPR requirements through appropriate safeguards.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
While we are not required to appoint a Data Protection Officer under Canadian law, all data protection inquiries are handled directly by our management team. Contact info at petal-dolphin.com for any concerns.
If you are located in the EEA and believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with your local supervisory authority. A list of supervisory authorities is available at the European Data Protection Board website.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The date at the top indicates the most recent revision.