Last updated: June 25, 2026
opal-dawn is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines how we comply with GDPR requirements and what rights you have regarding your personal information.
opal-dawn is the data controller for the personal information we collect through our website and services.
Contact information:
Email: [email protected]
Address: 428 Wellington Street West, Suite 302, Toronto, ON M5V 1E3, Canada
If you are a resident of the European Economic Area, you have the following rights:
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your personal data upon request.
If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest its accuracy or object to its processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
You have the right to object to the processing of your personal data when we process it based on our legitimate interests. You also have the right to object to direct marketing at any time.
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates data protection laws.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months if necessary.
We process your personal data based on one or more of the following legal grounds:
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose for which it was collected.
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you without your explicit consent or another lawful basis.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with GDPR requirements.
For questions about our data protection practices or to exercise your rights, please contact us at [email protected].