GDPR Compliance

Our Commitment to Data Protection

Velvet Orchard is committed to ensuring that your personal data is protected in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable. This page outlines how we handle your personal data and the rights you have regarding that data.

Data Controller

Velvet Orchard acts as the data controller for personal information collected through this website. Our contact details are:

Address: 142 Maple Street, Toronto, ON M5V 2K7, Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for a specific purpose, such as receiving communications from us.
• Contract: Processing is necessary for the performance of a contract with you, such as providing services you have requested.
• Legal Obligation: Processing is necessary to comply with legal requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights.

Your Rights Under GDPR

If you are located in a jurisdiction where GDPR applies, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data under certain circumstances.
• Right to Restriction: You can request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month of receiving it. If your request is complex or we receive numerous requests, we may extend this period by two additional months, in which case we will inform you.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we take appropriate measures to ensure that your personal data receives an adequate level of protection.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.

Right to Lodge a Complaint

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in the jurisdiction where you reside or work, or where the alleged infringement took place.

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for the latest information on our data protection practices.

Contact Us

If you have any questions about this GDPR information or our data practices, please contact us at:

Email: [email protected]

Address: 142 Maple Street, Toronto, ON M5V 2K7, Canada