This website contains promotional content about our consulting services

GDPR Compliance

Last Updated: October 2026

Latifsfion is committed to compliance with the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA). This page outlines how we handle personal data in accordance with GDPR requirements.

Data Controller

For the purposes of the GDPR, Latifsfion acts as the data controller for personal data collected through our website and services. Our contact information is:

Latifsfion
45 Wellington Street West, Suite 1200
Toronto, ON M5J 2N7
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: Where you have provided explicit consent for specific processing activities, such as receiving communications
  • Contract: Where processing is necessary to fulfill a contract with you or take steps at your request before entering into a contract
  • Legitimate Interests: Where we have a legitimate business interest that does not override your fundamental rights, such as improving our services and understanding how our website is used
  • Legal Obligation: Where processing is necessary to comply with applicable laws

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.

Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability: You may request to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

Right to Object: You may object to processing of your personal data based on our legitimate interests. We will cease processing unless we have compelling legitimate grounds.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, and we will inform you if such an extension is necessary.

We may ask you to verify your identity before fulfilling your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

International Data Transfers

As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has received an adequacy decision from the European Commission under GDPR Article 45, recognizing that Canadian law provides an adequate level of data protection.

If we transfer data to other jurisdictions outside the EEA that have not received an adequacy decision, we will implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When determining retention periods, we consider:

  • The nature and sensitivity of the data
  • The purposes for which we process the data
  • Applicable legal requirements
  • Our legitimate business interests

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures are reviewed and updated as necessary to maintain adequate protection.

Complaints

If you believe that we have not complied with GDPR requirements in handling your personal data, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside, work, or where the alleged infringement occurred.

Updates to This Page

We may update this GDPR compliance information from time to time. We encourage you to review this page periodically for the latest information about our data protection practices.