Last Updated: September 3, 2026
Although tundra-orca primarily operates in Canada, we recognize that we may process personal data of individuals located in the European Economic Area (EEA). We are committed to complying with the General Data Protection Regulation (GDPR) when handling such data.
We process personal data under the following legal bases:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of such data.
You may request correction of inaccurate personal data and completion of incomplete data.
Under certain circumstances, you have the right to request deletion of your personal data.
You may request that we limit the processing of your personal data in specific situations.
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you may withdraw that consent at any time.
You have the right to lodge a complaint with a supervisory authority in your jurisdiction.
When we transfer personal data from the EEA to Canada or other jurisdictions, we ensure appropriate safeguards are in place. Canada has been recognized by the European Commission as providing adequate data protection for personal data transferred from the EEA.
For transfers to other jurisdictions that lack adequacy decisions, we implement appropriate safeguards such as standard contractual clauses approved by the European Commission.
For questions regarding GDPR compliance or to exercise your rights, you may contact our data protection contact at:
Email: [email protected]
We process personal data for the following purposes:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also inform you directly without undue delay.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We will inform you of any such extension within the initial month.
We may request specific information to verify your identity before processing rights requests.
We may update this GDPR compliance statement periodically. Material changes will be communicated through our website or directly to affected individuals where required.