Last Updated: September 1, 2026
Our Commitment to Data Protection
Canyon-reach is committed to protecting the personal data of all our users, including those located in the European Economic Area (EEA), United Kingdom, and Switzerland. We comply with the General Data Protection Regulation (GDPR) and related data protection laws.
Data Controller
Canyon-reach acts as the data controller for personal information collected through our website and services. Our contact information is:
Canyon-reach
142 Heritage Lane, Suite 8
Kingston, Ontario K7L 2X9
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
Contractual Necessity
Processing necessary to fulfill our contract with you, such as delivering purchased route packages and providing customer support.
Legitimate Interests
Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring website security, where these interests do not override your fundamental rights.
Consent
Where you have given explicit consent, such as subscribing to our newsletter or accepting non-essential cookies. You may withdraw consent at any time.
Legal Obligation
Processing necessary to comply with our legal obligations, such as maintaining financial records.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access (Article 15)
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification (Article 16)
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restriction of Processing (Article 18)
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Request." We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.
International Data Transfers
Canyon-reach is based in Canada, which has been recognized by the European Commission as providing an adequate level of data protection. When we transfer data to service providers in other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Customer account data: Duration of account plus 2 years
- Purchase records: 7 years (legal requirement)
- Communication records: 3 years from last contact
- Website analytics: 26 months
Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected individuals without undue delay.
Children's Data
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.
Updates to This Notice
We may update this GDPR notice periodically. We will notify you of material changes through our website or by email if appropriate.
Contact Us
For any questions about our GDPR compliance or data protection practices, please contact:
Email: [email protected]
Address: 142 Heritage Lane, Suite 8, Kingston, Ontario K7L 2X9, Canada