GDPR Compliance Statement

Last Updated: November 12, 2026

Introduction

forest-oryx is committed to protecting the privacy and personal data of all individuals, including those in the European Economic Area (EEA). This statement outlines our compliance with the General Data Protection Regulation (GDPR) and your rights under this regulation.

Data Controller

For the purposes of GDPR, forest-oryx acts as the data controller for personal information collected through our website and training programs.

Contact details:
Email: info @ forest-oryx.com
Address: 427 Wellington Street West, Suite 305, Toronto, ON M5V 1E7, Canada

Legal Basis for Processing

We process personal data under the following legal grounds:

• Consent: When you submit forms or opt into communications
• Contractual necessity: When processing enrollment and delivering educational services
• Legitimate interests: For improving our services and website functionality
• Legal obligation: When required by applicable laws

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data we hold. We may charge a reasonable fee for additional copies beyond the first request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.

Right to Restrict Processing

You have the right to request restriction of processing your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at info @ forest-oryx.com with:

• Your full name and email address used for registration
• A clear description of which right you wish to exercise
• Any relevant details to help us locate your information

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Staff training on data protection principles
• Secure data backup procedures

Data Transfers

Our primary operations are based in Canada. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Explicit consent for specific transfers

Data Retention

We retain personal data only as long as necessary for the purposes stated in our Privacy Policy or as required by law. Typical retention periods include:

• Enrollment inquiries: 3 years from last contact
• Active student records: Duration of program plus 7 years
• Website analytics: 26 months
• Marketing communications: Until consent is withdrawn

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, as required by GDPR.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. For EEA residents, you can find your data protection authority at: https://edpb.europa.eu/about-edpb/board/members_en

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age without parental consent. If we become aware of such data collection, we will delete it promptly.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through prominent notices on our website.

Contact Information

For any questions about our GDPR compliance or to exercise your rights, contact us at:

Email: info @ forest-oryx.com
Address: 427 Wellington Street West, Suite 305, Toronto, ON M5V 1E7, Canada