Data Protection

Overview

Lush Fox is committed to protecting your personal data and respecting your privacy rights. This document outlines how we comply with data protection regulations and what rights you have regarding your personal information.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for fulfilling a service you have requested
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided this does not override your rights

Your Data Protection Rights

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected or when you withdraw consent.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

Right to Object

You have the right to object to processing of your personal data under certain conditions, particularly for direct marketing purposes.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]
Subject: Data Protection Request

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Data We Collect

Categories of Personal Data

• Identity Data: Name, contact preferences
• Contact Data: Email address, physical addresses of locations you wish to visit
• Transaction Data: Details about services you have requested or inquired about
• Technical Data: IP address, browser type, device information
• Usage Data: Information about how you use our website
• Communication Data: Your messages and correspondence with us

How We Protect Your Data

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest where appropriate
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Staff training on data protection practices
• Secure disposal procedures for data no longer needed

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Inquiry Data: Retained for up to 2 years after last contact
• Project Records: Retained for up to 7 years for business and legal purposes
• Marketing Consent: Retained until you withdraw consent
• Website Analytics: Typically retained for 26 months

International Data Transfers

Your personal data is primarily processed and stored within Canada. If data is transferred outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable laws.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

Updates to This Policy

We may update this data protection notice from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this notice periodically.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your local supervisory authority.

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376

Contact Us

For questions about this data protection notice or our data practices:

Email: [email protected]
Address: 287 Artisan Lane, Vancouver, BC V6B 1A1, Canada