Last Updated: September 16, 2026
Dawn-flow is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) for all users in the European Economic Area (EEA), United Kingdom, and Switzerland.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: To deliver route documentation you've requested
- Legitimate Interest: To improve our services and communicate relevant updates
- Consent: For marketing communications and cookie usage
- Legal Obligation: To comply with applicable laws and regulations
Your GDPR Rights
Under GDPR, you have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation on how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for processing at any time
Data We Collect
We collect only the minimum data necessary to provide our services:
- Name and email address (for route delivery)
- Selected route and transaction details
- Technical data (IP address, browser type) for security and functionality
- Cookie data (with your consent)
How Long We Keep Your Data
We retain personal data only as long as necessary:
- Transaction records: 7 years (legal requirement)
- Email communications: Until you unsubscribe or request deletion
- Account data: Until account closure or deletion request
International Data Transfers
Your data is primarily stored on servers located in Canada. If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data Security
We implement technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Address: 427 Baker Street, Unit 8B, Nelson, British Columbia, V1L 4H7, Canada
We will respond to your request within 30 days. If we cannot fulfill your request, we will explain why.
Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority.
Data Protection Officer
For questions about our GDPR compliance or data protection practices, contact our Data Protection Officer at: [email protected]