GDPR Compliance Statement
Last updated: October 2, 2026
Our Commitment to Data Protection
Cypress-wave is committed to protecting the privacy and personal data of all individuals, including visitors from the European Union and European Economic Area. This statement outlines our compliance with the General Data Protection Regulation (GDPR).
Data Controller Information
Cypress-wave acts as the data controller for personal information collected through our website and services.
Contact details:
Cypress-wave
4782 Mountain View Lane
Whitehorse, Yukon Y1A 5K8
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you submit consultation requests or contact forms, you provide explicit consent for us to process your information
- Contractual necessity: Processing required to fulfill service agreements and deliver requested services
- Legitimate interests: Improving our services, responding to inquiries, and maintaining business records
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification
You may request correction of inaccurate or incomplete personal information.
Right to Erasure
You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, or when you withdraw consent.
Right to Restrict Processing
You may request limitation of processing under certain circumstances, such as when contesting data accuracy.
Right to Data Portability
You may request transfer of your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing of your personal data based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
How to Exercise Your Rights
To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving your request, or inform you if an extension is necessary.
We may require verification of your identity before processing certain requests to ensure data security.
Data Collection and Use
We collect only personal data necessary for providing our services:
- Name and contact information for communication purposes
- Email address for responding to inquiries
- Project details and preferences for service delivery
- Property location information for site assessment purposes
We do not collect sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs.
Data Retention
Personal data is retained only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods include:
- Consultation requests: Retained for two years from last contact
- Active client data: Retained for duration of project plus seven years for business record purposes
- Marketing communications: Retained until consent is withdrawn
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission
- Secure data storage with access controls
- Regular security assessments
- Employee training on data protection
International Data Transfers
Our operations are based in Canada. If you are located in the European Union or European Economic Area, your personal data will be transferred to Canada for processing. We ensure appropriate safeguards are in place for such transfers.
Third-Party Data Sharing
We do not sell or rent personal data to third parties. Data may be shared only in the following limited circumstances:
- With service providers who assist in business operations, under strict confidentiality agreements
- When required by law or legal process
- To protect our rights, property, or safety, or that of others
Cookies and Tracking
We use cookies on our website for functionality and analytics purposes. You can control cookie preferences through your browser settings. For detailed information, see our Cookies Policy.
Children's Privacy
Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that a child's data has been collected, we will delete it promptly.
Updates to This Statement
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date. We encourage periodic review of this statement.
Contact and Questions
For questions about our GDPR compliance or data protection practices, or to exercise your rights, contact:
Cypress-wave
Data Protection Inquiries
4782 Mountain View Lane
Whitehorse, Yukon Y1A 5K8
Canada
Email: [email protected]