GDPR Compliance

Your data protection rights under the General Data Protection Regulation

Our Commitment to GDPR

vivid-tern is committed to protecting the personal data of individuals in the European Economic Area (EEA) and complying with the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you explicitly agree to our processing activities
  • Contract: To fulfill our contractual obligations when you purchase our collections
  • Legitimate Interests: To improve our services and communicate with you
  • Legal Obligation: To comply with applicable laws and regulations

Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we process your personal data and to access that data. We will provide a copy of your data in a structured, commonly used format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of your information.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

  • The data is no longer necessary for the purposes collected
  • You withdraw consent and no other legal basis exists
  • You object to processing and no overriding grounds exist
  • The data has been unlawfully processed

Right to Restriction of Processing

You can request restriction of processing when:

  • You contest the accuracy of the data
  • Processing is unlawful but you oppose erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EEA member state of your residence, workplace, or where the alleged infringement occurred.

Data Protection Officer

For questions about GDPR compliance or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]
Address: 438 Wellington Street West, Suite 204, Toronto, ON M5V 1E3, Canada

Data Processing Activities

What data we collect:

  • Contact information (name, email address)
  • Payment information (processed by third-party payment processors)
  • Usage data (IP address, browser type, access times)
  • Communications (emails, support requests)

Why we collect it:

  • To provide access to purchased collections
  • To process payments and prevent fraud
  • To communicate about your orders and our services
  • To improve our website and services

How long we keep it:

  • Account information: Duration of account plus 2 years
  • Transaction records: 7 years for accounting purposes
  • Marketing data: Until you unsubscribe or request deletion
  • Website analytics: 26 months

International Data Transfers

We may transfer your personal data outside the EEA. When we do, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by two months and will inform you of the extension.

Updates to This Notice

We may update this GDPR compliance notice periodically. We will notify you of material changes via email or prominent website notice.