Last Updated: September 16, 2026
While Prime-moss operates primarily in Canada, we recognize that some of our website visitors and service users may be located in the European Economic Area. This page outlines how we comply with the General Data Protection Regulation (GDPR) and protect the rights of individuals in the EEA.
We process personal data under the following legal bases:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and to receive a copy of that data.
You have the right to request correction of inaccurate or incomplete personal data.
You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
You have the right to request limitation of how we use your personal data in certain situations.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects.
For questions regarding GDPR compliance or to exercise your rights, please contact us at [email protected].
Your personal data is processed and stored in Canada. If you are located in the EEA, this constitutes a transfer of data outside the EEA. Canada has been recognized by the European Commission as providing an adequate level of data protection for commercial organizations covered under the Canadian Personal Information Protection and Electronic Documents Act.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EEA, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated "Last Updated" date.
For any questions or to exercise your GDPR rights, please contact us at:
Prime-moss
142 Wellington Street West
Toronto, ON M5J 1H8
Canada
Email: [email protected]