GDPR Compliance

Our Commitment to GDPR

ash spark is committed to complying with the General Data Protection Regulation (GDPR) for all users, including those located in the European Economic Area (EEA). This page outlines how we handle your personal data in accordance with GDPR requirements.

Data Controller

ash spark acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing personal data.

Contact details:
ash spark
456 Design District
Toronto, ON M5V 3A8
Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given explicit consent for processing your data for specific purposes, such as receiving marketing communications.
• Contract: Processing is necessary for the performance of a contract, such as providing course access after enrollment.
• Legal Obligation: Processing is necessary to comply with legal requirements, such as tax and accounting obligations.
• Legitimate Interest: Processing is necessary for our legitimate interests, such as improving our services and preventing fraud, provided these interests do not override your rights.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a valid request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the EEA, including Canada. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The specific retention period depends on the nature of the data and the purposes for which it is processed.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Protection Officer

For any questions or concerns regarding our data protection practices or to exercise your GDPR rights, please contact us at [email protected].

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You may contact the data protection authority in your country of residence or the authority in the jurisdiction where the alleged violation occurred.

Updates to This Notice

We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated notice on our website.