Last Updated: September 2026
frost-beaver is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area (EEA). This page outlines how we meet our obligations under the regulation.
frost-beaver acts as the data controller for personal data collected through our website and services. Our contact details are:
frost-beaver
245 Bay Street, Suite 1200
Toronto, ON M5H 2S6
Canada
Email: [email protected]
We process personal data under the following lawful bases as defined by GDPR:
When you submit a consultation request or subscribe to communications, you provide consent for us to process your data for those specific purposes. You may withdraw consent at any time.
When you engage our services, processing your data is necessary to fulfil our contractual obligations to you.
We may process data based on legitimate business interests, such as improving our services and website functionality, provided such interests do not override your fundamental rights.
If you are located in the EEA, you have the following rights:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request correction of any inaccurate personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month of receiving it. If your request is complex or we receive numerous requests, we may extend this period by a further two months, in which case we will inform you.
We may request specific information from you to verify your identity before processing your request.
As we are based in Canada, your data may be transferred outside the EEA. Canada has been recognised by the European Commission as providing adequate protection for personal data. Where we transfer data to other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
For questions about our GDPR compliance or to exercise your rights, please contact us at [email protected].
If you are located in the EEA and believe we have not addressed your concerns satisfactorily, you have the right to lodge a complaint with your local data protection supervisory authority.
We may update this GDPR information page from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.