GDPR Compliance Statement

Last Updated: June 23, 2026

Our Commitment to Data Protection

Although vine-seal operates primarily in Canada, we recognize the importance of data protection principles established by the General Data Protection Regulation. We apply similar standards to protect the personal information of all our customers.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual necessity: Processing required to fulfill equipment rental agreements
• Consent: Explicit permission for marketing communications or optional services
• Legitimate interests: Business operations that do not override individual privacy rights

Data Subject Rights

Individuals whose data we process have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Correct inaccurate or incomplete information
• Right to erasure: Request deletion of your data when no longer necessary
• Right to restrict processing: Limit how we use your data under certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Oppose processing based on legitimate interests

Data Retention

We retain customer data only as long as necessary for the purposes outlined in our Privacy Policy. Rental records are kept for three years to support service history and resolve potential disputes.

After this period, personal information is securely deleted unless legal obligations require longer retention.

International Data Transfers

Customer data is stored and processed exclusively within Canada. We do not transfer personal information to countries outside of Canadian jurisdiction.

Automated Decision-Making

We do not use automated systems or algorithms to make decisions that significantly affect customers. All reservation approvals and customer interactions involve human review.

Data Breach Notification

In the event of a data breach that poses risk to individual rights and freedoms, we will notify affected customers within 72 hours of becoming aware of the breach and report to relevant authorities as required by law.

Exercising Your Rights

To exercise any of the rights listed above, contact us at:

Email: [email protected]
Subject line: Data Protection Request

We will respond to valid requests within 30 days.

Supervisory Authority

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada.