GDPR Information

This page provides information about data protection rights under the General Data Protection Regulation (GDPR) and similar international privacy frameworks.

Last Updated: September 16, 2026

Applicability

While Brisk-sky operates in Canada and is primarily governed by Canadian privacy law, we recognize that some visitors and clients may be protected under GDPR (European Union) or similar regulations in other jurisdictions. We extend GDPR-equivalent rights to all users regardless of location.

Data Controller

For purposes of data protection law, the data controller is:

Brisk-sky
1847 Oceanview Road
Tofino, BC V0R 2Z0
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance - Processing is necessary to respond to inquiries and fulfill booking agreements for guided wilderness experiences
• Legitimate interests - We have legitimate business interests in maintaining safety records and operational documentation
• Consent - Where required, we obtain explicit consent for specific processing activities such as marketing communications
• Legal obligation - Some data retention is required by Canadian business and liability regulations

Your Data Protection Rights

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information in a structured, commonly used format within 30 days of a verified request.

Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will update records promptly upon verification of the correct information.

Right to Erasure

You may request deletion of your personal data in circumstances including:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and no other legal basis exists for processing
• You object to processing and no overriding legitimate grounds exist
• The data has been unlawfully processed

This right is not absolute. We may retain data where legally required for liability, accounting, or regulatory purposes.

Right to Restrict Processing

In certain situations, you can request that we limit how we use your data:

• While we verify accuracy of data you've contested
• When processing is unlawful but you prefer restriction over deletion
• When we no longer need the data but you require it for legal claims
• While we verify legitimate grounds after you've objected to processing

Right to Data Portability

For data you provided based on consent or contract performance, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller where technically feasible.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. Upon objection, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been violated. While we hope to resolve concerns directly, this right exists independently of any complaint process we offer.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with "Data Protection Request" in the subject line. Include:

• Your full name and contact information
• Specific right you wish to exercise
• Details about the data in question (if applicable)
• Proof of identity if required for verification

We will respond within 30 days. If your request is complex or we've received multiple requests, we may extend this by an additional 60 days with explanation.

Data We Collect

Personal data we collect includes:

• Contact information (name, email address)
• Inquiry and booking details (service preferences, dates, group size)
• Any additional information voluntarily provided in communications
• Technical data (IP address, browser type, pages visited) collected automatically through website use

See our Privacy Policy for comprehensive information about data collection and use.

Data Recipients

Personal data is not shared with third parties except:

• Emergency services if required during wilderness operations
• Legal authorities when legally obligated
• Insurance providers for claims processing

We do not sell or rent personal data to any third parties.

International Data Transfers

Your data is stored on servers located in Canada. If you are accessing this website from the European Union or other jurisdictions with different data protection laws, your information will be transferred to, stored in, and processed in Canada. Canadian privacy law provides substantial protections, though it differs from GDPR in structure and enforcement mechanisms.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy:

• Inquiry data without resulting booking: 1 year
• Booking and trip records: 3 years (for liability purposes)
• Marketing consent data: Until consent is withdrawn

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

Children's Data

Our services are not directed at children under 14. We do not knowingly collect personal data from children. If you believe we have collected information from a child, contact us immediately for removal.

Changes to Data Practices

If we make material changes to how we process personal data, we will update this page and our Privacy Policy, notify affected individuals where required, and obtain fresh consent if necessary.

Contact for Data Protection Matters

For questions or concerns about data protection:

Brisk-sky
Data Protection Inquiries
1847 Oceanview Road
Tofino, BC V0R 2Z0
Canada
Email: [email protected]