Last Updated: January 2026
Our Commitment
moss verse is committed to protecting the privacy and security of personal data. Although our primary operations are based in Canada, we recognize the importance of the General Data Protection Regulation (GDPR) and extend these protections to all individuals whose data we may process, regardless of their location.
Legal Basis for Processing
We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
Your Data Rights
Under GDPR and similar data protection laws, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you. We will respond to such requests within one month.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when you have objected to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
Exercising Your Rights
To exercise any of your data rights, please contact us using the details provided below. We will respond to your request within one month. In complex cases or where we receive a large number of requests, we may extend this period by up to two additional months, but we will inform you of any such extension within the first month.
Data Protection Measures
We implement appropriate technical and organizational measures to ensure the security of personal data, including:
- Encryption of data in transit and at rest
- Access controls limiting data access to authorized personnel
- Regular security assessments and updates
- Staff training on data protection practices
- Secure data disposal procedures
International Data Transfers
When we transfer personal data outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses approved by the European Commission or other legally recognized mechanisms.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For individuals in the European Union, this would be the data protection authority in your country of residence.
Contact for Data Protection Inquiries
For any questions or requests related to data protection and GDPR compliance, please contact us at:
moss verse
Data Protection Inquiries
2847 Industrial Boulevard, Unit 12
Toronto, ON M5V 2K7
Email: [email protected]