Last updated: September 2026
Our Commitment to GDPR
Tempered Storeys is committed to protecting the privacy and personal data of all individuals, including those residing in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and your rights under this regulation.
Data Controller
Tempered Storeys acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.
Contact: [email protected]
Address: 742 Sterling Avenue, Toronto, ON M5V 2K8, Canada
Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: When you submit forms or agree to cookies, you provide consent for processing.
- Contractual necessity: Processing required to fulfill appointment requests and service delivery.
- Legitimate interests: Improving our services and website functionality, provided these interests do not override your rights.
- Legal obligation: When required by applicable laws.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You can request that we limit the processing of your personal data under certain conditions.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.
Data Transfers
As we are based in Canada, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. We ensure appropriate safeguards are in place for any international data transfers.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Appointment records are retained for a reasonable period to support our services and comply with legal requirements.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. These measures include secure data storage, access controls, and regular security assessments.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at:
Email: [email protected]
We will respond to your request within one month. If your request is complex, we may extend this period by an additional two months, and we will inform you of any such extension.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside or work.
Updates to This Notice
We may update this GDPR notice periodically. Changes will be posted on this page with an updated revision date.