Last Updated: May 29, 2026
witty-threads is committed to protecting the privacy and data rights of all individuals, including those protected under the European Union's General Data Protection Regulation (GDPR). This page outlines our GDPR compliance measures and your rights under this regulation.
Although witty-threads is based in Canada, we recognize and respect the data protection rights of individuals in the European Economic Area (EEA) and process their personal data in accordance with GDPR requirements when applicable.
We process personal data under the following lawful bases as defined by GDPR:
When you submit an inquiry or reservation form, you provide consent for us to process your personal data for the purposes stated at the time of collection. You may withdraw consent at any time by contacting us.
When you purchase our services, we process your data as necessary to fulfill our contractual obligations, including delivering route materials, scheduling sessions, and providing customer support.
We may process data based on our legitimate business interests, such as improving our services, preventing fraud, and ensuring website security. We balance these interests against your fundamental rights and freedoms.
We may process data when required to comply with legal obligations, such as tax regulations and accounting requirements.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a valid request.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller without hindrance.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
As a Canadian company, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We ensure that any international transfers of personal data comply with GDPR requirements through appropriate safeguards.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
While we are not required to appoint a Data Protection Officer under GDPR, we have designated a privacy contact who can address your questions and concerns regarding data protection.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will take steps to delete that information promptly.
To exercise any of your rights under GDPR, please contact us using the information below. We may need to verify your identity before processing your request. We will respond to all legitimate requests within 30 days.
If you believe that we have not handled your personal data properly or have infringed your rights, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
For questions about GDPR compliance or to exercise your data protection rights, please contact us at:
witty-threads
Data Protection Contact
1847 Queen Street West, Suite 302
Toronto, Ontario M6R 1A7
Canada
Email: [email protected]
We will make every effort to respond to your inquiries promptly and to address any concerns you may have regarding our data protection practices.