Our Commitment to GDPR
radiant-stone is committed to ensuring the security and protection of the personal information that we process. We provide a compliant and consistent approach to data protection across our organization. We have always had robust and effective data protection practices in place which align with the requirements of the GDPR.
What is GDPR?
The General Data Protection Regulation (GDPR) is a European Union regulation that sets guidelines for the collection and processing of personal information from individuals who live in the European Union. It applies to any organization that processes the personal data of EU residents, regardless of where the organization is located.
Legal Basis for Processing
We process personal data under the following legal bases as defined by the GDPR:
Consent
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
Contract Performance
Where processing is necessary for the performance of a contract with you, such as providing the services you have purchased.
Legitimate Interests
Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests do not override your fundamental rights and freedoms.
Legal Obligations
Where processing is necessary for compliance with a legal obligation to which we are subject.
Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two additional months where necessary, taking into account the complexity of your request.
We may ask you to verify your identity before we can act on your request. If your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to act on the request.
Data Transfers
When we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include:
- Transferring data to countries that have been deemed to provide an adequate level of protection by the European Commission
- Using Standard Contractual Clauses approved by the European Commission
- Obtaining your explicit consent for the transfer
Data Protection Officer
While we are not required to appoint a Data Protection Officer under GDPR, we have designated a privacy contact who is responsible for overseeing questions in relation to this policy. If you have any questions about your rights or how we handle your data, please contact:
Privacy Contact
radiant-stone
145 King Street West, Suite 700
Toronto, ON M5H 1J8
Canada
Email: [email protected]
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. If you are in the EEA, you may contact the supervisory authority in your country of residence.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.
Last updated: September 2026