Our Commitment to Data Protection

Prairie Atom is committed to protecting the personal data of all individuals who interact with our services, including visitors from the European Economic Area. We comply with the General Data Protection Regulation (GDPR) and applicable Canadian privacy legislation in all our data handling practices.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity: Processing required to fulfill expedition bookings and provide services you have requested
• Consent: For marketing communications and optional data collection, obtained through clear opt-in mechanisms
• Legitimate interests: For business operations, fraud prevention, and service improvement, balanced against your rights and freedoms
• Legal obligation: When required to comply with applicable laws regarding record-keeping and safety documentation

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of what personal data we hold about you and receive a copy in a commonly used electronic format. We will respond to access requests within 30 days.

Right to Rectification

If personal data we hold is inaccurate or incomplete, you have the right to have it corrected. This is particularly important for safety-related information such as medical conditions or emergency contacts.

Right to Erasure

You may request deletion of your personal data in certain circumstances, including when it is no longer necessary for the purposes collected, or if you withdraw consent. Note that we may retain certain information when legally required for safety records or contractual obligations.

Right to Restrict Processing

You can request that we limit how we use your personal data while we verify accuracy or resolve concerns about processing legitimacy.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may receive your personal data in a structured, machine-readable format or request direct transfer to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data We Collect

The personal data we collect includes:

• Identification information: name, email address, postal address
• Health and fitness information: relevant to wilderness activity participation and safety
• Emergency contact details: for use during expeditions
• Payment information: processed through secure third-party payment processors
• Communication records: correspondence related to bookings and service inquiries
• Website usage data: collected through cookies and analytics tools with your consent

Data Retention

We retain personal data only as long as necessary for the purposes collected:

• Booking and safety records: seven years for legal compliance and insurance requirements
• Marketing communications: until you unsubscribe or withdraw consent
• Website analytics: aggregated data retained indefinitely; individual identifiers deleted after 26 months

International Data Transfers

Your personal data is primarily stored on servers located in Canada. If we transfer data outside Canada or the EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, regular security assessments, and staff training on data protection obligations.

Third-Party Processors

We work with carefully selected third-party service providers who process data on our behalf, including payment processors, email service providers, and website hosting services. All processors are bound by data processing agreements ensuring GDPR-compliant handling of your data.

Exercising Your Rights

To exercise any of your GDPR rights, contact us at [email protected] with your specific request. We will verify your identity before processing requests and respond within the timeframes required by GDPR.

You also have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where an alleged infringement occurred.

Data Protection Officer

For questions about our data protection practices or to exercise your rights, contact:

Privacy Coordinator
Prairie Atom Wilderness Expeditions
347 Ridgeway Crescent SW
Calgary, Alberta T2S 1M8
Canada
Email: [email protected]

Changes to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through prominent website notice or direct communication to affected individuals.