Privacy Policy

Personal Information You Provide

When you register for an account, create a listing, or make a booking, we collect information you voluntarily provide, including:

• Identity information: Full name, email address, phone number, profile photo
• Account credentials: Email and encrypted password (or third-party authentication tokens)
• Verification data: Government-issued ID (for Host verification), date of birth
• Listing details: Property descriptions, photos, pricing, amenities, house rules
• Communications: Messages exchanged between Hosts and Guests through the platform

Payment Information

Payment details (credit card numbers, bank account information) are collected and processed by our third-party payment processor, Stripe. EventSpace does not store full credit card numbers or bank account details on its servers.

Automatically Collected Information

When you use EventSpace, we automatically collect:

• Device information: Browser type, operating system, device identifiers
• Usage data: Pages viewed, search queries, features used, session duration
• Location data: Approximate location based on IP address (we do not use GPS tracking)
• Log data: IP address, access times, referring URLs, error logs

We use the information we collect to:

We may share your information in the following circumstances:

Between Hosts and Guests

When a booking is confirmed, we share limited information between the Host and Guest to facilitate the event. This may include names, profile photos, contact details, event details, and guest count.

Service Providers

We engage trusted third-party service providers to help operate the platform, including:

• Stripe for payment processing
• Cloudinary for image storage and optimization
• Analytics providers for understanding platform usage
• Email service providers for sending transactional and marketing communications

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of EventSpace, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your data.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Secure password hashing using bcrypt with salting
• Regular security assessments and vulnerability testing
• Access controls limiting employee access to personal data
• Secure infrastructure hosted on reputable cloud providers

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

EventSpace uses cookies and similar tracking technologies to:

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

Under Canadian privacy law, you have the following rights regarding your personal information:

To exercise any of these rights, please contact us at privacy@eventspace.ca. We will respond to your request within 30 days.

EventSpace is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as soon as reasonably possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@eventspace.ca so we can take appropriate action.

In accordance with PIPEDA's ten fair information principles, we:

• Accountability: Designate a Privacy Officer responsible for compliance
• Identifying Purposes: Identify the purposes for which information is collected at or before the time of collection
• Consent: Obtain meaningful consent for the collection, use, and disclosure of personal information
• Limiting Collection: Collect only the information necessary for the identified purposes
• Limiting Use, Disclosure, and Retention: Use information only for the purposes for which it was collected and retain it only as long as necessary
• Accuracy: Keep personal information as accurate, complete, and current as necessary
• Safeguards: Protect personal information with appropriate security measures
• Openness: Make our privacy policies and practices readily available
• Individual Access: Provide individuals with access to their personal information upon request
• Challenging Compliance: Allow individuals to challenge our compliance with these principles

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

When we make material changes, we will notify you by email (using the address associated with your account) and by posting a prominent notice on the platform at least 30 days before the changes take effect.

Your continued use of EventSpace after the effective date of any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer:

You may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you believe your privacy rights have been violated.