Our Commitment to GDPR
quaint-field.com is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page outlines how we handle your personal data in accordance with GDPR requirements and explains your rights as a data subject.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract: Processing necessary to fulfill our contract with you when you enroll in courses
- Consent: Processing based on your explicit consent for marketing communications and optional data collection
- Legitimate Interest: Processing necessary for our legitimate business interests, such as improving services and preventing fraud
- Legal Obligation: Processing required to comply with legal and regulatory requirements
Your GDPR Rights
Right to Access
You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format within 30 days of your request.
Right to Rectification
If your personal information is inaccurate or incomplete, you have the right to request correction. We will update your records promptly upon verification.
Right to Erasure
You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes collected, when you withdraw consent, or when you object to processing. Please note that we may need to retain certain information for legal compliance.
Right to Restrict Processing
You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of your data or object to our legitimate interest grounds.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller when technically feasible.
Right to Object
You may object to processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests by providing specific reasons related to your situation.
Right to Withdraw Consent
Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority.
Data Controller Information
The data controller responsible for your personal information is:
quaint-field.com
427 Wellington Street West
Toronto, ON M5V 1E7
Canada
Email: [email protected]
International Data Transfers
We are based in Canada and primarily process data within Canadian and North American servers. If we transfer data outside of the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data Protection Officer
For questions specifically related to data protection and GDPR compliance, you may contact our designated privacy team at [email protected] with "GDPR Inquiry" in the subject line.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.
How to Exercise Your Rights
To exercise any of your GDPR rights, please send a written request to [email protected]. Include "GDPR Request" in the subject line and specify which right you wish to exercise. We may need to verify your identity before processing your request.
We will respond to your request within 30 days. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you of such extension.
Updates to This Policy
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a notification of the changes.