Data protection

GDPR Notice

This notice explains how metallic-crest supports the rights of individuals under the General Data Protection Regulation.

Controller information

metallic-crest acts as the data controller for advisory communications and service records.

Legal basis

Why we process data

Consent

When you email us or request guidance, you provide consent to process relevant information.

Contractual necessity

We process data to deliver services you request and to maintain continuity.

Legitimate interests

We keep minimal records for service quality and compliance monitoring.

Your rights

Access, portability, and deletion

You may request a copy of your data, corrections, or deletion where applicable.

  • Right to access and correct your data
  • Right to restrict processing in certain cases
  • Right to object to non-essential processing

How to contact us

Send requests to [email protected]. We respond within a reasonable timeframe.

International data transfers

When students are based outside Canada, we handle transfers with safeguards and minimal data scope.

Retention

How long we keep data

We retain personal data only for as long as needed to fulfill advisory obligations and legal requirements.