Diluted Topsail

Our Commitment to Data Protection

We recognize the importance of protecting personal data and respect the rights of individuals under applicable data protection regulations, including the General Data Protection Regulation for visitors from the European Economic Area.

This page outlines how we comply with data protection principles and the rights available to you regarding your personal information.

Legal Basis for Processing

We process personal data on the following legal bases:

• Contract performance: Processing necessary to fulfill your reservation and provide dining services
• Legitimate interests: Improving our services and website functionality
• Consent: When you opt in to receive marketing communications
• Legal obligation: When required to retain records for compliance purposes

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Reservation data is typically retained for operational purposes and deleted after one year unless you request earlier deletion or we are legally required to maintain records longer.

International Data Transfers

Our operations are based in Canada. If you are accessing our website from outside Canada, your information may be transferred to, stored, and processed in Canada where our servers are located.

Canada has been recognized by the European Commission as providing adequate protection for personal data.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Security Measures

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Automated Decision Making

We do not use automated decision-making processes or profiling that would produce legal effects or similarly significantly affect individuals.

Contact Information

For questions about our GDPR compliance or to exercise your data protection rights, please contact us at [email protected] or write to us at 247 Wellington Street West, Toronto, Ontario M5V 3E3, Canada.