GDPR Compliance

Last Updated: January 4, 2026

Foundational Creations is committed to protecting the personal data of users in the European Union and European Economic Area in accordance with the General Data Protection Regulation (GDPR). This document explains your rights under GDPR and how we comply with the regulation.

1. Data Controller

Foundational Creations acts as the data controller for personal data collected through our Services. Our contact details for data protection matters are: Email: privacy@foundationalcreations.com. We have appointed a Data Protection Officer (DPO) who can be contacted at dpo@foundationalcreations.com for any questions regarding your personal data.

2. Legal Basis for Processing

We process your personal data under the following legal bases: (a) Consent: Where you have given explicit consent for processing, such as for marketing communications or optional data sharing. (b) Contract: Where processing is necessary to fulfill our contractual obligations to you, such as providing the Vaastu analysis services you requested. (c) Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our Services, preventing fraud, and ensuring security. (d) Legal Obligation: Where processing is required to comply with applicable laws and regulations.

3. Your Rights Under GDPR

Under GDPR, you have the following rights: (a) Right of Access: You can request a copy of your personal data we hold. (b) Right to Rectification: You can request correction of inaccurate or incomplete data. (c) Right to Erasure: You can request deletion of your personal data in certain circumstances. (d) Right to Restriction: You can request restriction of processing in certain circumstances. (e) Right to Data Portability: You can receive your data in a machine-readable format. (f) Right to Object: You can object to processing based on legitimate interests or for direct marketing. (g) Rights Related to Automated Decision-Making: You can request human intervention for decisions made solely by automated means. To exercise any of these rights, please contact us at privacy@foundationalcreations.com. We will respond to your request within 30 days.

4. International Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. We ensure adequate protection through: (a) EU Commission adequacy decisions. (b) Standard Contractual Clauses. (c) Binding Corporate Rules where applicable. You may request information about our safeguards by contacting us.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted or anonymized.

6. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In the EU, you can contact your local Data Protection Authority. We encourage you to contact us first so we can address your concerns.