GDPR Compliance

Last Updated: September 29, 2026

Your Rights Under GDPR

The General Data Protection Regulation (GDPR) provides specific rights to individuals regarding their personal data. If you are located in the European Economic Area (EEA), you have the following rights:

Right to Access

You have the right to request access to the personal data we hold about you. You can request a copy of your data in a commonly used electronic format.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw your consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects on you.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations to provide coaching services
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override these interests

Data Controller

Lunar-moss is the data controller responsible for your personal data. Our contact information is:

Lunar-moss
427 Wellington Street West, Suite 305
Toronto, Ontario M5V 1E7
Canada
Email: [email protected]

International Data Transfers

Your personal data may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Protection Officer

For questions specifically related to data protection and your GDPR rights, you may contact our data protection representative at [email protected].

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. In some cases, we may need to verify your identity before processing your request.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specific retention periods depend on the type of data and the purpose of processing.

Updates to This Notice

We may update this GDPR compliance notice periodically. Any changes will be posted on this page with an updated effective date.