GDPR Compliance

Last Updated: August 2026

Our Commitment to Data Protection

ridge-wave is committed to protecting the privacy and personal data of all users, including those in the European Economic Area (EEA). This page outlines our compliance with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.

Data Controller

ridge-wave acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Contact details:
ridge-wave
1247 Wellington Street West
Ottawa, ON K1Y 3B2
Canada
[email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

Contractual Necessity: Processing necessary to fulfill our service agreement with you
Consent: Processing based on your explicit consent, which you can withdraw at any time
Legitimate Interests: Processing necessary for our legitimate business interests, balanced against your rights
Legal Obligation: Processing necessary to comply with applicable laws

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access: You can request a copy of the personal data we hold about you
Right to Rectification: You can request correction of inaccurate or incomplete personal data
Right to Erasure: You can request deletion of your personal data under certain circumstances
Right to Restrict Processing: You can request limitation of how we process your data
Right to Data Portability: You can request your data in a structured, machine-readable format
Right to Object: You can object to processing based on legitimate interests or direct marketing
Rights Related to Automated Decision-Making: You have rights concerning automated profiling decisions

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Photos submitted for editing are typically deleted within 30 days of project completion. Contact form data is retained for business records for up to 3 years.

International Data Transfers

As a Canadian company, data may be processed and stored in Canada. Canada has been recognized by the European Commission as providing adequate data protection. Where we transfer data to other jurisdictions, we ensure appropriate safeguards are in place.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Filing a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority in the EU member state where you reside or work.

Updates to This Information

We may update this GDPR compliance information periodically. Significant changes will be communicated through our website or via email where appropriate.