Data Protection Information

Last updated: September 10, 2026

Data Controller

The data controller responsible for processing your personal information is:

maple-nest
427 Douglas Street
Victoria, British Columbia V8V 2P7
Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: By submitting a documentation request, you provide explicit consent for us to process your personal information
• Contractual necessity: Processing is necessary to fulfill our obligation to deliver the route documentation you requested
• Legitimate interests: We maintain records for quality assurance and service improvement purposes

Data Subject Rights

Under applicable data protection regulations, you have the following rights:

Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request restriction of processing under certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within 30 days of receiving your request.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls limiting data access to authorized personnel only
• Secure backup procedures

International Data Transfers

Your personal data is processed and stored within Canada. We do not transfer personal data outside of Canadian jurisdiction.

Automated Decision-Making

We do not engage in automated decision-making or profiling activities.

Supervisory Authority

If you believe our processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada.

Contact

For any questions regarding data protection or to exercise your rights, contact us at [email protected]