GDPR Compliance

Last Updated: September 11, 2026

Our Commitment to GDPR

Although forest-logic operates primarily in Canada, we recognize the importance of the General Data Protection Regulation (GDPR) and extend similar protections to all individuals, regardless of location.

This document outlines how we comply with GDPR principles and protect the rights of individuals whose personal data we process.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent

When you submit forms or explicitly agree to receive communications, we process your data based on your consent. You may withdraw consent at any time by contacting us.

Contract Performance

When you engage our services, we process necessary personal information to fulfill our contractual obligations to you.

Legitimate Interests

We may process certain data based on legitimate interests, such as improving our services, preventing fraud, or ensuring website security. These interests are balanced against your rights and freedoms.

Data Subject Rights Under GDPR

You have comprehensive rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restriction

You may request limitation of processing in specific situations, such as while we verify the accuracy of disputed data.

Right to Data Portability

You may request transfer of your personal data in a structured, commonly used format to another controller where technically feasible.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Exercising Your Rights

To exercise any of these rights, submit a request to [email protected]. We will respond within one month of receiving a valid request. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

We may request additional information to verify your identity before processing requests involving personal data.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

Client engagement records are typically retained for seven years following service completion to meet professional and legal requirements. Marketing communications data is retained until you unsubscribe or request deletion.

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions for specific jurisdictions
• Other legally recognized transfer mechanisms

Data Protection Officer

For questions specifically related to GDPR compliance or to exercise your rights, contact our data protection representative at [email protected].

Supervisory Authority

If you believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. However, we encourage you to contact us first so we may address your concerns directly.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.