GDPR Compliance
Last updated: June 25, 2026
atoll mongoose is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws. This page outlines our GDPR compliance practices and your rights as a data subject.
Data Controller
atoll mongoose acts as the data controller for personal information collected through our website and services.
Contact information:
Email: [email protected]
Address: 342 Harbourview Avenue, Vancouver, BC V6B 2R8, Canada
Legal Basis for Processing
We process personal data only when we have a legal basis to do so. Our legal bases include:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
- Legal obligation: Processing is necessary for us to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests
Personal Data We Collect
We collect and process the following types of personal data:
- Identity information (name, address)
- Contact information (email address)
- Service-related information (service requests, preferences)
- Technical data (IP address, browser type, device information)
- Usage data (how you use our website)
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request access to your personal data and obtain a copy of the information we hold about you.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
How to Exercise Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended in complex cases.
When submitting a request, please provide sufficient information to allow us to verify your identity and locate your data.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.
International Data Transfers
We are based in Canada, which has been recognized by the European Commission as providing adequate protection for personal data. If we transfer data to countries outside the European Economic Area that do not provide adequate protection, we will implement appropriate safeguards.
Automated Decision-Making
We do not use automated decision-making or profiling in ways that produce legal effects or similarly significantly affect individuals.
Changes to This Policy
We may update this GDPR compliance statement periodically. Any changes will be posted on this page with an updated revision date.
Contact Us
If you have questions about our GDPR compliance practices or wish to exercise your rights, please contact us:
Email: [email protected]
Address: 342 Harbourview Avenue, Vancouver, BC V6B 2R8, Canada