GDPR Compliance Statement

Last Updated: January 1, 2026

Our Commitment

heath-vector is committed to protecting the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfill our services
• Legitimate Interests: When we have legitimate business reasons that do not override your rights
• Legal Obligation: When required by law

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You can request limitation of how we process your data
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent at any time where we rely on it

Data Collection and Use

We collect only the personal data necessary to provide our services and fulfill our business purposes. This includes:

• Contact information for communication
• Business information for service delivery
• Usage data for website improvement

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. When data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Transfers

If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Third-Party Processors

We work with carefully selected service providers who process data on our behalf. These processors are contractually bound to protect your data and process it only according to our instructions.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours and inform affected individuals without undue delay.

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age. If we become aware of such collection, we will delete the data promptly.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 347 Wellington Street West, Toronto, ON M5V 3T5, Canada

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local supervisory authority.

Updates to This Statement

We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.

Contact Our Data Protection Officer

For questions about data protection or to exercise your rights, contact us at [email protected].