GDPR Compliance

Effective Date: October 2, 2026

1. Data Controller

pebble-tapir operates as the data controller for personal information collected through this website. Our contact details are:
Email: [email protected]
Address: 427 Cordova Street West, Vancouver, BC V6B 1E5, Canada

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you submit forms or accept cookies
• Contractual necessity: To respond to service inquiries and fulfill project agreements
• Legitimate interests: For website analytics and improving user experience

3. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data under certain conditions
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing

4. How to Exercise Your Rights

To exercise any of these rights, send a request to [email protected] with "GDPR Request" in the subject line. We will respond within 30 days of receiving your request.

5. Data Transfers

Your personal data is stored on servers located in Canada. If data is transferred outside Canada or the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

6. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach.

7. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

8. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR provisions. For EEA residents, contact your local data protection authority.

9. Contact for GDPR Inquiries

For questions about GDPR compliance or data protection practices, contact:
[email protected]