GDPR Compliance Statement

Last Updated: September 14, 2026

Our Commitment to Data Protection

While mellow-orchard operates primarily in Canada, we recognize the importance of the General Data Protection Regulation for individuals in the European Economic Area. We have implemented measures to ensure compliance with GDPR principles.

Legal Basis for Processing

We process personal data based on legitimate interests in providing requested services, contractual necessity when delivering solutions, and consent for marketing communications.

Data Subject Rights

If you are located in the EEA, you have specific rights under GDPR:

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing

Data Protection Officer

For GDPR-related inquiries, contact our data protection officer at [email protected].

International Data Transfers

Personal data from the EEA may be transferred to Canada. We ensure adequate safeguards are in place for such transfers in accordance with GDPR requirements.

Supervisory Authority

EEA residents have the right to lodge a complaint with their local data protection authority if they believe their data protection rights have been violated.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.

Consent Withdrawal

Where processing is based on consent, you may withdraw that consent at any time by contacting us at [email protected]. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Children's Data

We do not knowingly process data of individuals under 16 years of age without parental consent.