GDPR Compliance Statement

Last Updated: June 23, 2024

Our Commitment to Data Protection

pebble-badger is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill a service agreement with you
• Legal Obligation: Processing is required to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided it does not override your rights

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request access to your personal data and receive information about how we process it.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Subject line: "GDPR Rights Request"

We will respond to your request within 30 days. In some cases, we may extend this period by an additional 60 days if the request is complex.

Data We Collect

We collect and process the following categories of personal data:

• Identity data: name, contact details
• Property information: address, property size, landscape details
• Communication data: email correspondence, service inquiries
• Technical data: IP address, browser type, device information
• Usage data: website navigation patterns, pages viewed

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Service inquiry data: 2 years from last contact
• Customer contract data: 7 years after contract completion (legal requirement)
• Marketing consent data: Until consent is withdrawn
• Website analytics data: 26 months

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection practices
• Incident response procedures

International Data Transfers

If we transfer your personal data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules

Data Protection Officer

For questions about data protection or to exercise your rights, you may contact our data protection team at:

pebble-badger
1247 Irrigation Boulevard
Vancouver, BC V6B 2K9
Canada
Email: [email protected]

Updates to This Statement

We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. The updated version will include a revised "Last Updated" date.