GDPR Compliance

Last Updated: September 16, 2026

Our Commitment to Data Protection

Delta-sage respects your privacy rights and complies with applicable data protection regulations, including principles outlined in the General Data Protection Regulation (GDPR) for clients in regions where it applies.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual necessity: to provide workshop organization services you have requested
• Legitimate interests: to maintain business records and improve service quality
• Consent: for marketing communications where applicable

Data We Collect

We collect and process personal data necessary for service delivery, including contact information, workshop specifications, project requirements, and communication records. Data collection occurs through consultation requests, service agreements, and direct communications.

How We Use Your Data

Personal data is used to schedule consultations, prepare workshop designs, coordinate installations, communicate about services, maintain client records, and fulfill legal obligations. We do not use your data for purposes beyond those necessary for service delivery without obtaining additional consent.

Data Sharing

We may share limited personal information with contractors and suppliers involved in delivering your workshop services. These parties are contractually obligated to protect your information and use it only for the specified purposes.

We do not sell personal data to third parties or use it for unrelated marketing purposes.

Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right to access: request copies of your personal data
• Right to rectification: correct inaccurate or incomplete information
• Right to erasure: request deletion of your personal data under certain conditions
• Right to restrict processing: limit how we use your data
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: oppose processing based on legitimate interests
• Right to withdraw consent: for processing based on consent

Data Retention

We retain personal data for the duration necessary to provide services and comply with legal obligations. Client project records are typically maintained for seven years following service completion. You may request earlier deletion subject to our legal retention requirements.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include secure data storage, access controls, and regular security assessments.

International Data Transfers

Personal data is primarily stored and processed within Canada. If data transfers outside Canada become necessary for service delivery, we ensure appropriate safeguards are in place to protect your information.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Exercising Your Rights

To exercise any of your data protection rights or ask questions about our data practices, contact us at [email protected]. We will respond to requests within the timeframes required by applicable law.

Supervisory Authority

If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

Updates to This Notice

We may update this GDPR compliance notice periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or direct notification where appropriate.