Last Updated: May 29, 2026
Legacy Chronicles is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page outlines our practices regarding the collection, use, and protection of personal data for individuals in the European Economic Area (EEA).
We process personal data only when we have a legal basis to do so. Our legal bases include:
When you provide explicit consent for us to process your personal data for specific purposes, such as receiving communications or participating in our services.
When processing is necessary to fulfill a contract with you, such as providing research services, tours, or workshops you've requested.
When we have a legitimate interest in processing your data, such as improving our services, preventing fraud, or maintaining website security, provided these interests are not overridden by your rights.
When we must process your data to comply with legal obligations, such as tax requirements or responding to lawful requests from authorities.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
You have the right to request correction of inaccurate or incomplete personal data.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.
To exercise any of these rights, please contact us at [email protected] with "GDPR Request" in the subject line. Please include:
We will respond to your request within 30 days. In some cases, we may extend this period by an additional 60 days if the request is complex, in which case we will inform you of the extension and the reasons for the delay.
For GDPR-related inquiries, you may contact our Data Protection Officer:
Email: [email protected]
Subject Line: ATTN: Data Protection Officer
We collect and process the following categories of personal data:
We process your personal data for the following purposes:
We do not sell your personal data. We may share your data with:
All third parties with whom we share data are required to respect the security of your data and treat it in accordance with applicable law.
Your personal data may be transferred to and processed in countries outside the EEA, including Canada. We ensure appropriate safeguards are in place, such as:
We implement appropriate technical and organizational measures to protect your personal data, including:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Retention periods vary depending on the type of data and purpose:
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.
We may update this GDPR compliance statement from time to time. We will notify you of significant changes by posting a notice on our website or by contacting you directly.
For questions or concerns about our GDPR compliance or to exercise your rights, please contact us:
Legacy Chronicles
247 Wellington Street
Ottawa, ON K1A 0H8
Canada
Email: [email protected]
Subject: GDPR Inquiry
If you are not satisfied with our response to your GDPR-related concerns, you have the right to lodge a complaint with your local data protection supervisory authority.