GDPR Compliance
Last Updated: September 29, 2026
1. Introduction
This page outlines how brisk-lotus complies with the General Data Protection Regulation (GDPR) when processing personal data of individuals in the European Economic Area (EEA).
2. Data Controller
For the purposes of GDPR, brisk-lotus acts as the data controller for personal information collected through our website and services.
Contact details:
Email: info at brisk-lotus.com
Address: 1247 Saint-Laurent Boulevard, Montreal, Quebec H2X 2S6, Canada
3. Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract Performance: When processing is necessary to fulfill service agreements
- Legitimate Interests: For business operations, security, and service improvement
- Legal Obligations: When required to comply with applicable laws
4. Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
4.1 Right to Access
You can request confirmation of whether we process your personal data and obtain a copy of that data.
4.2 Right to Rectification
You can request correction of inaccurate or incomplete personal information.
4.3 Right to Erasure
You can request deletion of your personal data in certain circumstances, including when:
- Data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and no overriding legitimate grounds exist
- Data has been unlawfully processed
4.4 Right to Restriction
You can request limitation of processing in certain situations, such as when contesting data accuracy or objecting to processing.
4.5 Right to Data Portability
You can receive your personal data in a structured, commonly used format and transmit it to another controller.
4.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
4.7 Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time.
4.8 Right to Lodge a Complaint
You have the right to file a complaint with a supervisory authority in your jurisdiction if you believe our processing violates GDPR.
5. Exercising Your Rights
To exercise any of these rights, contact us at info at brisk-lotus.com with:
- Your full name and contact information
- Description of your request
- Verification of your identity (if necessary)
We will respond to requests within one month, with possible extension to two months for complex requests.
6. Data Processing Activities
6.1 What Data We Collect
- Contact information: name, email address
- Service preferences and selections
- Communication records
- Technical data: IP address, browser information, usage patterns
6.2 How We Use Data
- Providing requested services
- Responding to inquiries
- Improving service quality
- Maintaining security
- Complying with legal requirements
7. Data Sharing
We do not sell personal data. We may share data with:
- Service providers operating under data processing agreements
- Legal authorities when required by law
- Other parties with your explicit consent
8. International Data Transfers
Data may be transferred outside the EEA to Canada and other jurisdictions. We ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions where applicable
- Other legally recognized transfer mechanisms
9. Data Retention
We retain personal data only as long as necessary for the purposes outlined or as required by law. Retention periods vary based on:
- Nature of the data
- Purpose of collection
- Legal and regulatory requirements
10. Security Measures
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
11. Cookies and Tracking
We use cookies and similar technologies. You can manage cookie preferences through your browser settings. See our Cookies Policy for details.
12. Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
13. Children's Data
Our services are not directed to individuals under 16 years of age. We do not knowingly collect data from children.
14. Updates to This Notice
We may update this GDPR compliance notice. Significant changes will be communicated through our website or via email.
15. Contact and Questions
For GDPR-related questions or to exercise your rights:
Email: info at brisk-lotus.com
Address: 1247 Saint-Laurent Boulevard, Montreal, Quebec H2X 2S6, Canada