GDPR Compliance

Last Updated: September 11, 2026

Our Commitment to Data Protection

aura-crane is committed to protecting the privacy and personal data of all individuals, including those in the European Union. While we are based in Canada, we recognize and respect the rights provided under the General Data Protection Regulation.

Legal Basis for Processing

We process personal data on the following legal bases: contractual necessity when you register for our programs, legitimate interest in improving our services and communicating about offerings, and consent for specific uses such as marketing communications that you may opt into.

Data We Collect

We collect personal identification information including name and email address, professional information you provide during registration, payment and transaction information necessary for service provision, and technical information about your use of our website including IP address and browsing behavior.

How We Use Your Data

Your personal data is used to provide the services you have requested, communicate about programs and administrative matters, process payments and maintain financial records, improve our services through analysis of usage patterns, and comply with legal obligations.

Your Rights Under GDPR

You have the right to access your personal data and receive a copy of it. You may request correction of inaccurate or incomplete data. You can request deletion of your personal data in certain circumstances. You have the right to restrict or object to certain processing activities. You may request data portability to transfer your information to another service. You can withdraw consent for processing based on consent at any time.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within thirty days. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been violated.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our privacy policy. Program participant data is typically retained for seven years after program completion for business and legal purposes, then securely deleted.

International Data Transfers

Your data is primarily stored in Canada. If data is transferred outside Canada, we ensure appropriate safeguards are in place through contractual commitments and security measures that meet GDPR standards.

Data Security

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, or destruction. These include encryption of data in transit and at rest, access controls limiting who can view personal data, regular security assessments and updates, and staff training on data protection obligations.

Automated Decision Making

We do not use automated decision making or profiling that produces legal effects or similarly significant impacts on individuals.

Children's Data

Our services are not directed to individuals under 18. We do not knowingly collect data from children. If we become aware that we have collected data from a child, we will delete it promptly.

Changes to This Policy

We may update this GDPR compliance statement periodically. Significant changes will be communicated to affected individuals. The current version will always be available on this page.

Contact Information

For questions about data protection or to exercise your rights, contact us at [email protected]

Data Protection Inquiries
aura-crane
427 West Hastings Street, Suite 1800
Vancouver, BC V6B 1L4
Canada