GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

sage-isle is committed to protecting the privacy and personal data of all individuals, including those residing in the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.

Data Controller

sage-isle acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Contact details:
Email: [email protected]
Address: 742 Harbourfront Drive, Suite 305, Vancouver, British Columbia V6Z 2Y3, Canada

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests and does not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.

Your Rights Under GDPR

If you are a resident of the EEA, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or direct marketing.
• Rights Related to Automated Decision-Making: You have rights regarding automated decision-making including profiling.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two additional months if your request is complex.

International Data Transfers

As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We ensure that any transfer of personal data complies with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. When personal data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Supervisory Authority

If you are an EEA resident and believe that we have not adequately addressed your concerns regarding your personal data, you have the right to lodge a complaint with your local data protection supervisory authority.

Changes to This Notice

We may update this GDPR compliance notice from time to time. We encourage you to review this page periodically for the latest information on our privacy practices.