GDPR Compliance Statement

Last Updated: October 12, 2026

Difenethni is committed to protecting the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you provide explicit consent for specific processing activities
Contractual necessity: To fulfill our obligations in providing services you request
Legitimate interests: To operate and improve our services while respecting your rights
Legal obligations: To comply with applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of it
Right to rectification: You can request correction of inaccurate personal data
Right to erasure: You can request deletion of your personal data in certain circumstances
Right to restrict processing: You can request limitation of how we use your data
Right to data portability: You can request transfer of your data to another service provider
Right to object: You can object to processing based on legitimate interests
Right to withdraw consent: You can withdraw consent at any time where processing is based on consent

Data Protection Officer

For questions regarding data protection or to exercise your rights, please contact:

[email protected]

Data Processing Activities

We process personal data for the following purposes:

Providing and managing financial guidance services
Responding to inquiries and customer support requests
Improving our website and services
Complying with legal and regulatory requirements

Data Transfers

Your personal data is primarily stored and processed within Canada. If we transfer data outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication procedures
Employee training on data protection practices

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and where feasible, within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws. In Canada, you may contact the Office of the Privacy Commissioner of Canada.

Changes to This Statement

We may update this GDPR compliance statement from time to time. Significant changes will be communicated through our website or directly to affected individuals.

Contact Information

For any questions or concerns regarding GDPR compliance or to exercise your rights, please contact us at:

[email protected]