Last Updated: September 11, 2026
Stone-saga is committed to compliance with the European Union's General Data Protection Regulation (GDPR). This page outlines how we process personal data of individuals located in the European Economic Area and your rights under GDPR.
For the purposes of GDPR, stone-saga acts as the data controller for personal information collected through our website and services.
Contact information:
Email: [email protected]
Address: 425 West Georgia Street, Suite 1870, Vancouver, BC V6B 5R2, Canada
We process personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data.
You can request correction of inaccurate personal data or completion of incomplete information.
You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose or when you withdraw consent.
You can request limitation of how we use your data in specific situations, such as while accuracy is being verified or during objection proceedings.
You may request transfer of your personal data to another service provider in a structured, commonly used, machine-readable format.
You can object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects. We do not currently employ automated decision-making processes.
To exercise any of your GDPR rights, submit a request to [email protected]. Please include sufficient information to verify your identity and specify which right you wish to exercise.
We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months, and we will inform you of any extension.
We process personal data for the following purposes:
We retain personal data only as long as necessary for the purposes outlined or as required by law. Specific retention periods include:
We implement appropriate technical and organizational measures to ensure data security, including:
Personal data may be transferred to and processed in Canada and other jurisdictions outside the European Economic Area. When transferring data internationally, we ensure appropriate safeguards are in place, such as:
We engage third-party service providers who process personal data on our behalf. These processors are contractually bound to:
In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report breaches to the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR.
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we discover we have processed a child's data without appropriate parental consent, we will delete that information promptly.
You have the right to lodge a complaint with a data protection supervisory authority if you believe our processing of your personal data violates GDPR. Contact details for EU supervisory authorities are available at: https://edpb.europa.eu
We may update this GDPR compliance page to reflect changes in our data processing practices or legal requirements. Material changes will be communicated through website notice or direct communication where appropriate.