Information for users regarding the General Data Protection Regulation.
Last updated: September 2026
Although Glossy-cypress is based in Canada, we recognize the importance of data protection for all users, including those in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.
Glossy-cypress acts as the data controller for personal information collected through this website. Our contact details are:
Glossy-cypress
742 Greenway Boulevard, Suite 305
Vancouver, BC V6Z 2K8
Canada
Email: [email protected]
We process personal data under the following lawful bases as defined by GDPR:
When you submit an inquiry form or subscribe to communications, you provide explicit consent for us to process your information for the stated purposes. You may withdraw consent at any time by contacting us.
We may process data based on legitimate business interests, such as improving our website, preventing fraud, and conducting analytics. We balance these interests against your rights and freedoms.
When you engage our services, processing your information is necessary for performing our contractual obligations to you.
We may process data when required to comply with applicable laws, regulations, or legal processes.
As a data subject under GDPR, you have the following rights:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will respond to access requests within 30 days.
You may request correction of inaccurate personal data or completion of incomplete data we hold about you.
You may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
Where processing is based on consent or contract and performed by automated means, you may request to receive your data in a structured, commonly used format.
You have the right to object to processing based on legitimate interests, including profiling. You may also object to processing for direct marketing purposes at any time.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
Your personal data may be transferred to and processed in Canada, where our offices are located. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where we transfer data to other jurisdictions, we implement appropriate safeguards including standard contractual clauses.
We retain personal data only as long as necessary for the purposes described in our Privacy Policy. Specific retention periods depend on the nature of the information and our legal obligations. When data is no longer needed, it is securely deleted or anonymized.
We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and regular security assessments. In the event of a data breach affecting your rights and freedoms, we will notify relevant supervisory authorities and affected individuals as required by GDPR.
Our website uses cookies and similar technologies. We obtain your consent before placing non-essential cookies. For detailed information, please see our Cookie Policy.
To exercise any of your GDPR rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to all legitimate requests within 30 days, though this may be extended for complex requests with prior notice.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EEA member state of your residence, place of work, or where the alleged infringement occurred.
We may update this GDPR compliance information periodically. Changes will be posted on this page with a revised date. We encourage you to review this page regularly for any updates.