Last updated: January 15, 2026
Overview
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although nimble-ravine is based in Canada, we are committed to upholding GDPR standards for all visitors to our website, regardless of their location.
Data Controller
For the purposes of GDPR, nimble-ravine acts as the data controller for personal information collected through this website. As the data controller, we determine the purposes and means of processing personal data.
Contact information for the data controller:
nimble-ravine
142 Maple Creek Drive
Toronto, ON M5V 2T6
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit a contact form or sign up for communications, you provide explicit consent to process your data for the stated purposes.
- Legitimate Interests: We may process data to improve our website, prevent fraud, and ensure network security, where these interests do not override your fundamental rights.
- Contractual Necessity: When you request our services, processing is necessary to fulfill or prepare a contract.
- Legal Obligation: We may process data to comply with legal requirements.
Your Rights Under GDPR
If you are a resident of the European Economic Area, you have the following data protection rights:
- Right of Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to request correction of any information you believe is inaccurate or incomplete.
- Right to Erasure: You have the right to request that we delete your personal data under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to request that we transfer your data to another organization, or directly to you, under certain conditions.
- Right to Object: You have the right to object to our processing of your personal data under certain conditions.
- Right to Withdraw Consent: Where we rely on consent to process your data, you have the right to withdraw that consent at any time.
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two months, in which case we will inform you of the extension and the reasons for it.
To verify your identity when making a request, we may ask for additional information. This is a security measure to ensure that personal data is not disclosed to anyone who has no right to receive it.
International Data Transfers
Your information may be transferred to and maintained on servers located outside of your country of residence, where data protection laws may differ. When transferring data from the EEA to countries not deemed to provide adequate protection, we implement appropriate safeguards such as standard contractual clauses approved by relevant authorities.
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. When we no longer need your data, we will securely delete or anonymize it.
Data Security
We implement technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption, access controls, and regular security assessments.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
Supervisory Authority
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
Updates to This Information
We may update this GDPR compliance information from time to time. We will post any changes on this page and update the revision date at the top.