GDPR Compliance
Last Updated: June 24, 2026
Our Commitment to Data Protection
While we are based in Canada, we recognize the importance of data protection rights for all individuals, including those in the European Union. This page explains how we comply with principles aligned with the General Data Protection Regulation.
Legal Basis for Processing
We process personal data under the following legal bases:
Contractual Necessity
When you enroll in training programs, we process personal information necessary to deliver those services, including name, email address, and program-related communications.
Legitimate Interest
We process data for website analytics, security, and service improvement where such processing serves our legitimate business interests and does not override your fundamental rights.
Consent
For non-essential cookies and certain marketing communications, we obtain explicit consent before processing.
Data Subject Rights
Individuals have the following rights regarding their personal data:
Right of Access
You have the right to request confirmation of whether we process your personal data and to receive a copy of that data.
Right to Rectification
You can request correction of inaccurate or incomplete personal information.
Right to Erasure
You may request deletion of your personal data, subject to legal retention obligations.
Right to Restriction
You can request that we limit processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive personal data you provided to us in a structured, commonly used format and to transmit it to another controller.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with:
- Your full name and contact information
- Description of the specific right you wish to exercise
- Any relevant details to help us locate your information
We will respond to requests within 30 days. If we require additional time, we will notify you of the extension and reasons.
Data Protection Measures
We implement appropriate technical and organizational measures to ensure data security, including encrypted data transmission, secure server infrastructure, access controls and authentication, regular security assessments, and data minimization practices.
International Data Transfers
Our operations are based in Canada. Personal data may be processed and stored in Canada. We ensure appropriate safeguards are in place for any international data transfers.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.
Enrollment information is retained for seven years after program completion. Contact inquiries are retained for two years unless deletion is requested. Analytics data is retained for one year.
Children's Data
We do not knowingly collect or process personal data from individuals under 16 years of age without parental consent. If you believe we have collected such data, contact us immediately for deletion.
Complaints and Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with us directly at [email protected].
Individuals in the EU also have the right to lodge a complaint with their local data protection supervisory authority.
Data Processing Records
We maintain records of our data processing activities, including purposes of processing, categories of data subjects and personal data, categories of recipients, data retention periods, and security measures implemented.
Third-Party Processors
When we engage third-party service providers who process personal data on our behalf, we ensure they provide sufficient guarantees of appropriate technical and organizational measures.
Current processors include website hosting providers and email communication services. All processors are bound by data processing agreements.
Data Breach Notification
In the event of a data breach that poses a risk to individual rights and freedoms, we will notify affected individuals without undue delay and report to relevant authorities where required.
Privacy by Design
We implement data protection principles at the design stage of all data processing activities and throughout the data lifecycle.
Contact Our Data Protection Officer
For data protection inquiries, contact us at:
Email: [email protected]
Address: 427 Wellington Street West, Suite 302, Toronto, ON M5V 1E7, Canada
Updates to This Notice
We may update this GDPR compliance notice periodically. Material changes will be communicated through prominent notice on our website.