GDPR Compliance Statement

Last Updated: September 7, 2026

Our Commitment to Data Protection

Cedar Voyage is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Data Controller

Cedar Voyage acts as the data controller for personal information collected through our website and services. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

Contact Information:
Cedar Voyage
847 Wellington Street West
Toronto, Ontario M5V 3H9
Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill our reservation and dining services
  • Legitimate Interest: Improving our services and communicating relevant information
  • Consent: Where you have given explicit consent for specific processing activities
  • Legal Obligation: Compliance with applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request confirmation of whether we are processing your personal data and to receive a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You may request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You may be required to verify your identity before we process your request.

Data We Collect

We collect and process the following categories of personal data:

  • Identity data: name, title
  • Contact data: email address, mailing address
  • Preference data: dietary restrictions, reservation preferences
  • Technical data: IP address, browser type, device information
  • Usage data: how you interact with our website

How We Use Your Data

We use your personal data for the following purposes:

  • Processing and managing your reservations
  • Communicating with you about your bookings
  • Accommodating dietary requirements and preferences
  • Improving our website and services
  • Complying with legal obligations
  • Sending marketing communications (with your consent)

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods depend on the nature of the data and legal requirements.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Encryption of data in transit and at rest
  • Access controls and authentication procedures
  • Regular security assessments
  • Staff training on data protection

International Data Transfers

Your personal data is primarily stored and processed in Canada. If we transfer data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and within 72 hours of becoming aware of the breach, where feasible.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Canada, you may contact:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca

Changes to This Statement

We may update this GDPR Compliance Statement from time to time. Any changes will be posted on this page with an updated revision date.