Privacy Policy
Introduction
We respect your privacy. This policy explains what data we collect, why we collect it, and how we keep it secure, in line with Canadian laws including PIPEDA.
Toronto Minimal Tours operates in Ontario, Canada. Our processing of personal information is guided by principles of accountability, transparency, and data minimization.
- Legal basis: consent, performance of a contract, and legitimate interests as applicable.
- We collect only what we need to deliver and improve our services.
- We apply safeguards appropriate to the sensitivity of the information.
Data we collect
- Contact information (name, email, phone) when you submit forms.
- Booking preferences such as language and time slots.
- Technical data: pages visited, device type, and cookie preferences.
Sensitive information
We do not intentionally collect sensitive information (e.g., health, biometric, or government IDs). If such data is accidentally provided, it will be deleted unless legally required.
How we use data
- To provide and improve our tour services.
- To respond to your inquiries and manage bookings.
- To comply with legal obligations in Canada.
Personalization and analytics
We may use aggregated analytics to enhance user experience. Personalization is minimal and never involves automated decisions producing legal effects.
Security
- Transport security via TLS for all form submissions.
- Role-based access controls and least-privilege principles.
- Backups with restricted access and periodic integrity checks.
No system is completely secure; however, we apply appropriate safeguards and continuously improve them.
Retention
We retain data only as long as necessary for the purposes described or as required by law. When no longer needed, we securely delete or anonymize it.
- Inquiry records: up to 12 months.
- Booking records: up to 7 years (tax and audit requirements).
- Cookie consent and theme preferences: up to 12 months.
International transfers
Where data is processed outside Canada, we ensure comparable protection through contractual and technical safeguards, consistent with PIPEDA.
Your rights
You may request access, correction, or deletion of your data. Contact [email protected]. We will verify identity before fulfilling requests.
Updates to this policy
We may update this policy to reflect changes in practices or laws. We will indicate the latest revision date and, where appropriate, notify you of significant changes.
Automatic reminder set. Next review countdown: —
Contact
Email: [email protected] · Phone: +1 (437) 271-9438
If you have unresolved concerns, you may contact the Office of the Privacy Commissioner of Canada (OPC).