Last updated: June 2026
velvet-orchard is committed to protecting the privacy and personal data of all individuals, including those residing in the European Economic Area (EEA). This page outlines our compliance with the General Data Protection Regulation (GDPR) and explains the rights available to data subjects under this regulation.
For the purposes of the GDPR, velvet-orchard acts as the data controller for personal data collected through this website. Our contact information is:
velvet-orchard
742 Riverside Drive, Suite 205
Toronto, ON M4J 1A5
Canada
Email: [email protected]
We process personal data under the following legal bases as defined by the GDPR:
Where you have provided explicit consent for us to process your personal data for specific purposes, such as receiving communications or enabling certain website features.
Where processing is necessary to fulfill a contract with you or to take steps at your request prior to entering into a contract, such as providing quotes for our services.
Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. This includes improving our services and website functionality.
Where processing is necessary to comply with legal obligations to which we are subject.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and, if so, to request access to that data along with information about how it is processed.
You have the right to request that we correct any inaccurate personal data we hold about you, and to have incomplete data completed.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
You have the right to object to the processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you.
To exercise any of your rights under the GDPR, please contact us using the information provided above. We will respond to your request within one month, unless the request is complex or you have made multiple requests, in which case we may extend this period by up to two additional months.
We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
As we are located in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection, ensuring that your data receives appropriate safeguards when transferred.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for processing, and legal requirements.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay, unless an exception applies under the GDPR.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.
For any questions or concerns regarding our GDPR compliance or to exercise your data subject rights, please contact us at:
velvet-orchard
742 Riverside Drive, Suite 205
Toronto, ON M4J 1A5
Canada
Email: [email protected]