Privacy policy

SplatNest respects your privacy and handles personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

• Bookings: your name, email, optional mobile number, number of guests, notes you give us (such as allergies or access needs), your waiver signature (typed name, date, time and IP address) and your booking history.
• Payments: handled by Stripe. We never see or store your full card number.
• Messages: what you send through our contact and party forms.
• Feedback: ratings and comments you choose to send after a visit.
• Website use: privacy-friendly, aggregated analytics (Vercel Web Analytics) without advertising cookies.

Why we use it

• To take and manage your booking, send your confirmation and a feedback request after your visit, and handle refunds.
• To keep a record of the signed waiver.
• To reply to your messages.
• To meet legal, tax and accounting obligations.

We don't sell your information and we don't send marketing emails unless you've opted in.

Who we share it with

Only service providers that help us run bookings: Stripe (payments), Supabase (secure database), Resend (email), Vercel (website hosting) and Cloudflare (email routing and DNS). Some of these providers may store data outside Canada, including in the United States, where it may be subject to local laws.

How long we keep it

Booking and waiver records are kept for 7 years for legal and tax reasons, then deleted. Contact messages are kept for 2 years.

Your choices

You can ask to see, correct or delete your personal information, subject to legal record-keeping requirements. Use our contact form and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

Security

Data is encrypted in transit, access is limited to staff who need it, and our database uses strict access rules.