GDPR Compliance

Last Updated: September 10, 2026

Data Controller

grove-cougar operates as the data controller for personal information collected through this website and related services. Our contact information for data protection inquiries: [email protected].

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: You provide explicit consent when submitting inquiry forms or accepting cookies
Contract Performance: Processing is necessary to fulfill service agreements you enter into with us
Legitimate Interests: We process data to improve services, prevent fraud, and maintain website security
Legal Obligation: Certain processing is required to comply with Canadian and applicable international laws

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

Right to Access: Request copies of your personal data we hold
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data under certain circumstances
Right to Restrict Processing: Request limitation on how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw previously given consent at any time

How to Exercise Your Rights

To exercise any of these rights, send a detailed request to [email protected]. We will respond within 30 days of receiving your request. You may need to verify your identity before we process certain requests.

Data Transfers

Your personal data may be transferred to and processed in Canada. We ensure appropriate safeguards are in place when transferring data internationally, in accordance with GDPR requirements.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Typical retention periods:

Service inquiry data: 3 years from last contact
Completed service records: 5 years for business continuity
Marketing consent records: until consent is withdrawn

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Complaints

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority.

Contact

For questions about GDPR compliance or to exercise your rights, contact us at [email protected].