Waves of Joy Consulting
Company Data Agreement
Effective November 2, 2026 · Version 2026-11-02
Roles and instructions
This agreement supplements the Terms for company-controlled personal information. The company determines lawful purposes, notices, permissions, user access and retention. Waves of Joy Consulting processes the information to provide TradeRoots on the company’s documented instructions, including its selected features and permissions. We also determine our own purposes for account administration, security and legal compliance as described in the Privacy Policy.
Safeguards, confidentiality and providers
We restrict access to authorized people with a service need, apply confidentiality obligations, protect private records and uploaded files with encryption, maintain encrypted backups and investigate security incidents. Authorized providers may process information only for their contracted service, subject to appropriate confidentiality and security commitments. We assess new providers and transfers, disclose material changes and give companies a means to raise concerns before a material new processing arrangement. See Service providers.
Requests and incidents
We assist companies with access, correction, portability, retention and deletion requests and legal assessments within our service role. We notify an affected company without undue delay after confirming an incident involving its information and provide available information needed to assess reporting duties. We cooperate with required regulator and individual notifications and keep an incident register. The company must notify us promptly of suspected unauthorized access involving its accounts.
End of service and evidence
On an authorized request, we arrange return or deletion of company information, subject to lawful retention, disputes, backups and other people’s rights. The portable personal passport is distinct from the company’s confidential records. We provide reasonable information about our safeguards and relevant incident handling to support a company’s compliance review, while protecting security secrets and other customers. Contact the Privacy Officer to arrange a request or review.
25 Governors Lane, Stratford, PE C1B 1M2, Canada
info@traderoots.ca · Make a privacy request