Our commitment to data protection for European users
reed-cipher is committed to protecting the privacy and personal data of all users, including those located in the European Economic Area (EEA) and the United Kingdom. This page provides specific information about how we comply with the General Data Protection Regulation (GDPR) and your rights under this regulation.
For the purposes of GDPR, reed-cipher acts as the data controller for personal data collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data.
Contact details for data protection inquiries:
reed-cipher
150 King Street West, Suite 2800
Toronto, ON M5H 1J9
Canada
Email: [email protected]
Under GDPR, we must have a valid legal basis for processing your personal data. Depending on the type of processing, we rely on the following legal bases:
Where you have given us explicit consent to process your personal data for specific purposes, such as receiving marketing communications or allowing non-essential cookies. You may withdraw your consent at any time.
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as when you engage our services.
Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights. This includes improving our services, preventing fraud, and ensuring network security.
Where processing is necessary to comply with legal obligations to which we are subject.
If you are located in the EEA or UK, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.
You have the right to request that we correct any inaccurate personal data we hold about you. We will respond to such requests within one month.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently make automated decisions of this nature.
As reed-cipher is based in Canada, personal data collected from users in the EEA or UK may be transferred to and processed in Canada. The European Commission has recognized Canada as providing an adequate level of data protection.
Where we transfer data to other countries that have not received an adequacy decision, we implement appropriate safeguards such as standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary based on:
We implement appropriate technical and organizational measures to protect personal data, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
To exercise any of your rights under GDPR, please contact us at [email protected]. When making a request, please provide:
We may need to verify your identity before processing your request. We will respond to all valid requests within one month, though this period may be extended by two months for complex requests.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. For users in the EU, this would be the data protection authority in your member state of residence, place of work, or place of the alleged infringement.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.