GDPR Compliance Statement

Last Updated: September 10, 2026

Our Commitment to Data Protection

While pure-gorge operates primarily within Canada, we recognize that individuals from the European Union may visit our website. We are committed to respecting the principles outlined in the General Data Protection Regulation (GDPR) for all users.

Legal Basis for Processing

We process personal information based on the following legal grounds:

• Consent: When you submit an inquiry form, you provide explicit consent for us to process your information
• Legitimate Interest: Processing is necessary for our business operations and responding to inquiries
• Contractual Necessity: If you become a client, processing is necessary to fulfill our contractual obligations

Your Rights Under GDPR

If you are an EU resident, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and receive a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we limit how we use your personal information under certain circumstances.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Data Processing Activities

We process the following categories of personal data:

• Contact information (name, email address)
• Project details provided in inquiry forms
• Communication records related to projects

Data Recipients

Personal data may be shared with:

• Architectural consultants when required for project planning
• Structural engineers for technical assessments
• Material suppliers for project-specific sourcing

All third parties are contractually bound to maintain data confidentiality.

International Data Transfers

Your personal data is stored on servers located in Canada. If data must be transferred outside Canada for project purposes, we ensure appropriate safeguards are in place.

Data Retention

Inquiry data is retained for two years. Client project data is retained for seven years in accordance with Canadian business record requirements. After these periods, data is securely deleted.

Automated Decision Making

We do not use automated decision-making or profiling that would produce legal effects or similarly significantly affect you.

Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encrypted data transmission
• Access controls and authentication
• Regular security assessments
• Employee data protection training

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach.

Exercising Your Rights

To exercise any of your GDPR rights, contact us at [email protected]. We will respond to your request within 30 days.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Contact Our Data Protection Officer

For questions about data protection practices or to exercise your rights, email [email protected] with "GDPR Inquiry" in the subject line.