GDPR Compliance

Last Updated: September 9, 2026

Overview

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union. While quiet-gorge is based in Canada, we respect the principles of GDPR and are committed to protecting the privacy rights of all our clients.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: Processing necessary to fulfill our obligations when you book an expedition
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our services
• Legal Obligation: Processing required to comply with legal and regulatory requirements

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data when:

• Processing is based on legitimate interests
• Processing is for direct marketing purposes
• Processing is for scientific or historical research

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, please contact us at:

[email protected]

How to Exercise Your Rights

To exercise any of your GDPR rights, please send a written request to the email address above. Include:

• Your full name and email address used for bookings
• Clear description of which right you wish to exercise
• Any relevant details to help us locate your information

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days and will inform you of any such extension.

International Data Transfers

Your personal data is processed and stored in Canada. We implement appropriate safeguards to ensure your data receives an adequate level of protection when transferred internationally.

Data Security Measures

We implement technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls limiting who can view personal data
• Staff training on data protection principles
• Incident response procedures for data breaches

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and no later than 72 hours after becoming aware of the breach.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Changes to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, by email.