Data Processing Policy

Introduction

This Data Processing Policy explains how Capital Profit Lab ("we," "our," or "us") processes your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Canadian privacy laws.

This policy should be read in conjunction with our Privacy Policy, which provides additional information about how we collect, use, and protect your personal information.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes, such as receiving newsletters or marketing communications.
• Contract Performance: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your rights and freedoms.

Categories of Personal Data

We may process the following categories of personal data:

• Identity Data: Name, username, and similar identifiers
• Contact Data: Email address, telephone number, and postal address
• Technical Data: IP address, browser type, device information, and usage data
• Profile Data: Preferences, interests, and feedback
• Usage Data: Information about how you use our website and services
• Marketing Data: Your preferences for receiving marketing communications

Purposes of Processing

We process your personal data for the following purposes:

• To provide and maintain our website and services
• To respond to your inquiries and provide customer support
• To send you educational materials and newsletters (with your consent)
• To improve our website and services through analytics
• To comply with legal obligations
• To protect our rights and prevent fraud
• To personalize your experience on our website

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When determining the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the data
• Whether we can achieve those purposes through other means
• Applicable legal requirements

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection
• Secure data storage and backup procedures

Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data.
• Right to Data Portability: You have the right to request transfer of your data to another service provider.
• Right to Object: You have the right to object to processing of your personal data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us using the information provided in the Contact section below.

Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Third-Party Processors

We may share your personal data with trusted third-party service providers who assist us in operating our website and conducting our business. These processors are contractually obligated to:

• Process data only in accordance with our instructions
• Implement appropriate security measures
• Comply with applicable data protection laws
• Not use your data for their own purposes

Changes to This Policy

We may update this Data Processing Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page.

Contact Us

If you have any questions about this Data Processing Policy or wish to exercise your rights regarding your personal data, please contact us: