GDPR Compliance

Last Updated: September 2026

Our Commitment to Data Protection

Witty-lotus is committed to protecting the personal data of individuals in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines how we comply with GDPR requirements and explains your rights as a data subject.

Data Controller Information

Witty-lotus acts as the data controller for personal information collected through this website. Our contact details are:

Witty-lotus
350 Bay Street, Suite 1200
Toronto, Ontario M5H 2S6
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to our communications.
• Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Legal Obligation: When processing is necessary to comply with a legal obligation.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with your local supervisory authority.

Data Transfers

As Witty-lotus is based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. When transferring data to other countries, we implement appropriate safeguards to ensure your data is protected.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period depends on the nature of the data and our legal obligations. When personal data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures are regularly reviewed and updated to address emerging threats.

Children's Data

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

For any questions about our GDPR compliance or to exercise your data protection rights, please contact us at:

Email: [email protected]
Address: 350 Bay Street, Suite 1200, Toronto, Ontario M5H 2S6, Canada