Privacy Policy

Active Vancouver
https://activevancouver.ca
Effective Date: January 1, 2025

At Active Vancouver, we prioritize your privacy and the protection of your personal information. This Privacy Policy explains how we collect, use, store, and share your personally identifiable information (“Personal Data”) in connection with the Active Vancouver website at https://activevancouver.ca (the “Website”) and related services, including browsing activities, maintaining a bucket list, and accessing the local business catalogue (collectively, the “Service”). It also outlines your rights regarding your Personal Data and how to contact us with questions.

This Privacy Policy applies to all users of the Service, including when you visit our Website, create an account, engage with activities, or interact with us through marketing or support channels.

By using the Service, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree with our practices, please do not provide Personal Data or use the Service. For terms governing the use of the Service, please review our Terms of Service.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via the email associated with your account. The “Effective Date” above indicates the date of the latest revision.

1. What Data We Collect

Personal Data refers to information that identifies or can be used to identify an individual. We collect only the Personal Data necessary to provide and improve the Service. This may include:

Identity Data: Name, username, and email address collected via Google authentication when you register or log in, or when you interact with us (e.g., through support inquiries).
Social Media Data: When you use Google authentication (or future social login options), we collect your name, username, email address, and, if available, your profile picture.
Business Data: For businesses listing in our catalogue or sponsors, we collect information such as company name, address, email, phone number, activity descriptions, images, and contact details of a representative.
Device Data: Information about the device you use to access the Service, such as IP address, browser type, device type, and operating system.
Online Activity Data: Information about your interactions with the Service, such as pages visited, activities saved to your bucket list, or search history, collected via cookies or similar technologies through Google Analytics and Hotjar.

Data that is anonymized or cannot be linked to an individual is not considered Personal Data.

2. How We Use Your Data

We use your Personal Data to provide, maintain, and enhance the Service. Specific uses include:

Service Operation: To manage your account, enable bucket list functionality, and ensure the Service works across devices.
Personalization: To tailor content, such as activity recommendations, based on your interests and interactions.
Communication: To send updates, notifications, or responses to your inquiries, including support requests.
User Support: To address your questions, comments, or issues and verify requests related to this Privacy Policy.
Analytics: To analyze how you use the Service via Google Analytics and Hotjar to improve functionality and user experience.
Marketing: To provide promotional content from sponsors or inform you about relevant activities, with your consent where required.
Legal Compliance: To comply with applicable laws, regulations, or legal requests.
Security: To authenticate accounts, prevent fraud, and ensure a safe environment.

3. Disclosing Your Data

We may share your Personal Data with the following parties or in these circumstances:

Businesses and Sponsors: We may share your contact details with businesses or sponsors to facilitate activity inquiries or promotions, only with your consent or as necessary to provide the Service.
Third-Party Providers: We share data with service providers such as Dreamhost (hosting), Cloudflare (content delivery), Google Analytics, and Hotjar (analytics) who perform functions on our behalf, bound by confidentiality agreements.
Legal Requirements: We may disclose data to comply with legal obligations, such as responding to court orders, law enforcement requests, or regulatory requirements in Canada, the US, or other jurisdictions.
Business Transitions: In the event of a merger, acquisition, or sale, your Personal Data may be transferred as a business asset.
With Consent: We may share data with other parties if you provide explicit consent.

4. Securing Your Data

We implement technical, administrative, and physical measures to protect your Personal Data from unauthorized access, misuse, or loss, including:

Encryption for data transmission and storage, supported by Dreamhost and Cloudflare.
Access controls to limit data access to authorized personnel only.
Regular security reviews to protect against vulnerabilities.

While we strive to secure your data, no online system is 100% secure. If you have concerns about data security, contact us as described in the Contact Us section.

5. Data Retention Policy

We retain Personal Data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law (e.g., for legal compliance). When no longer needed, we will delete or anonymize your data. If deletion is not possible (e.g., due to backups on Dreamhost), we will securely store and isolate it until deletion is feasible.

6. Data Protection Rights

Under British Columbia’s Personal Information Protection Act (PIPA) and other applicable laws, you have the following rights regarding your Personal Data:

Right to Know: To understand what Personal Data we collect and how it is used, as outlined in this Privacy Policy.
Right of Access: To request access to your Personal Data and information about its use and storage.
Right to Correction: To request updates to inaccurate or outdated Personal Data.
Right to Erasure: To request deletion of your Personal Data, subject to legal or operational exemptions (e.g., data needed for account management).
Right to Complain: To file a complaint with the Office of the Information and Privacy Commissioner for British Columbia if you believe we have mishandled your data.

To exercise these rights, contact us as described in the Contact Us section. We may verify your identity before processing requests, which may involve confirming your email, name, or other details.

7. Third-Party Sites and Services

This Privacy Policy applies only to data collected through the Service. The Service uses third-party services, including Google for authentication, Dreamhost for hosting, Cloudflare for content delivery, Google Analytics, and Hotjar for analytics. These services have their own privacy policies, and we are not responsible for their practices. We recommend reviewing their policies:

8. Children’s Privacy

The Service is not intended for individuals under 19, the age of majority in British Columbia. We do not knowingly collect Personal Data from anyone under 19 without parental or guardian consent. If we learn that we have collected such data, we will promptly deactivate the account and delete the data. Contact us at [email protected] if you believe we have collected data from someone under 19.

9. Cookies and Tracking

We use cookies and similar technologies (e.g., web beacons) through Google Analytics and Hotjar to enhance your experience on the Service. These include:

Essential Cookies: To enable core functionality, such as user authentication and account management.
Analytical Cookies: To track usage patterns (e.g., pages visited, activities saved) via Google Analytics and Hotjar to improve the Service.
Functional Cookies: To remember your preferences and personalize content.

You can manage cookies through your browser settings or by visiting allaboutcookies.org. Disabling cookies may affect the Service’s functionality.

10. International Data Transfers

Your Personal Data is primarily stored in the United States through Dreamhost. Due to Cloudflare’s global content delivery network, your data may also be processed in other countries. By using the Service, you acknowledge that your data may be subject to the legal regulations of these jurisdictions, which may include disclosure to government bodies or courts. We ensure that all data transfers comply with this Privacy Policy and applicable laws to protect your privacy.

11. Contact Us

For questions about this Privacy Policy or our handling of your Personal Data, contact our Data Protection Officer at [email protected]. We will respond promptly and may verify your identity for certain requests.