GDPR Compliance Statement

To Upstairs LLC is committed to ensuring the privacy and protection of personal data in accordance with the General Data Protection Regulation (GDPR). This document outlines our approach to GDPR compliance and how we handle personal data collected through our website.

1. Data Collection

We collect personal data through various means on our website, including but not limited to contact forms, newsletter sign-ups, and account registrations. The types of personal data we collect may include names, email addresses, phone numbers, and any other information provided voluntarily by our users.

2. Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. This may include the necessity of processing for the performance of a contract, compliance with legal obligations, consent of the data subject, or legitimate interests pursued by our company or a third party.

3. Data Security

We have implemented appropriate technical and organizational measures to safeguard the personal data we collect against unauthorized access, disclosure, alteration, and destruction. We regularly review and update our security measures to ensure compliance with GDPR requirements.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal or regulatory requirements. Once the data is no longer needed, it will be securely deleted or anonymized.

5. Data Subject Rights

Under the GDPR, data subjects have certain rights regarding their personal data. These rights include the right to access, rectify, erase, restrict processing, and object to the processing of their personal data. Data subjects can exercise these rights by contacting us using the information provided below.

6. Data Transfers

We may transfer personal data to third parties, including service providers and affiliates, located in countries outside the European Economic Area (EEA). We ensure that adequate safeguards are in place to protect the data transferred, including standard contractual clauses approved by the European Commission.

7. Contact Information

If you have any questions or concerns regarding our GDPR compliance or the handling of your personal data, please contact us at:

To Upstairs LLC
248 1st Ave W, PO Box 1755,
Kalispell, MT 59901
Email: toupstairs@protonmail.com

8. Updates to this Policy

We reserve the right to update this GDPR compliance statement periodically to reflect changes in our data processing practices or regulatory requirements. Any updates will be posted on this page, and the effective date will be revised accordingly.

Effective Date: March 7, 2023

---

Please ensure to include this page on your website and update it as necessary to maintain compliance with GDPR regulations. If you have any further questions or need additional assistance, feel free to ask!