GDPR Compliance Information
Last Updated: August 26, 2026
Our Commitment to GDPR
Although we operate primarily in Canada, we recognize that some participants may be residents of the European Union. We voluntarily comply with General Data Protection Regulation (GDPR) principles for all users regardless of location.
Legal Basis for Processing
We process personal data under the following legal bases:
- Contractual Necessity: Processing your booking information and expedition details is essential to fulfill our service agreement with you.
- Legitimate Interest: We maintain records for safety documentation and liability protection, which serves legitimate business interests without overriding your privacy rights.
- Legal Obligation: Certain data retention is required by Canadian insurance regulations and wilderness guiding licensing requirements.
- Consent: For optional communications such as newsletters about upcoming expeditions or seasonal availability updates.
Data Subject Rights
Under GDPR principles, you have these rights:
Right to Access
Request a complete copy of all personal data we hold about you. We respond to such requests within 30 days at no charge.
Right to Rectification
Correct any inaccurate or incomplete personal information. This is particularly important for emergency contact details and medical disclosures.
Right to Erasure
Request deletion of your data, subject to legal retention requirements. We must retain booking records for seven years due to insurance policy terms, but can anonymize identifiable details after expedition completion.
Right to Restrict Processing
Limit how we use your information while maintaining necessary records. For example, you can opt out of promotional communications while keeping your booking history intact.
Right to Data Portability
Receive your personal data in a structured, machine-readable format for transfer to another service provider if desired.
Right to Object
Object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
International Data Transfers
All data is stored on servers located in Canada. If you are an EU resident, this constitutes an international data transfer. Canada is recognized by the European Commission as providing adequate data protection standards.
Automated Decision Making
We do not use automated systems or algorithms to make decisions about expedition suitability. All participant assessments involve human review by experienced guides.
Data Protection Officer
For GDPR-related inquiries or to exercise your data subject rights, contact our data protection coordinator at [email protected] with "GDPR Request" in the subject line.
Supervisory Authority
If you are an EU resident and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority.
Breach Notification
In the unlikely event of a data breach affecting your personal information, we will notify affected individuals within 72 hours of discovering the breach and provide details about what data was compromised and what steps we are taking.