2.1 Scope and accountability
This Privacy Policy explains how BucketListPlanner.ca collects, uses, discloses, protects, retains, and provides access to personal information. It applies to the website, accounts, travel-planning features, personal lists, sharing, Community Contributions, support, and related communications.
BucketListPlanner.ca is accountable for personal information under its control. The Privacy Officer can be contacted at legal@bucketlistplanner.ca.
2.2 Information we collect
We may collect the following categories of personal information:
- Account information, including name, email address, verification status, roles, authentication records, and settings.
- Profile information, including a profile photo or selected Travel Avatar.
- Preferences, including home city, country, time zone, currency, date format, distance units, and travel interests.
- Travel content, including bucket lists, favourites, visited history, ratings, notes, cities, attractions, and trip plans.
- Sharing information, including trip-sharing relationships, recipient permissions, copied-trip references, and collaboration activity.
- Community Contributions, including suggested places, corrections, reports, screenshots, source pages, comments, and support details.
- Communications, including emails, support requests, feedback, and records of consent or unsubscribe requests.
- Transaction information, including subscription status, purchase records, billing events, taxes, and payment-provider references. We do not intend to store full payment-card numbers.
- Security and administration information, including sessions, login history, failed access attempts, administrative actions, impersonation audit records, and fraud indicators.
- Technical information, including IP address, browser, device type, operating system, referring page, cookie identifiers, diagnostic information, and error logs.
- Information supplied by another user when that user shares a trip, adds you as a collaborator, or includes information about you in travel-planning content.
2.3 How we collect information
We collect information directly from you, automatically through your use of the service, from another user who shares information with you or about you, and from service providers that support authentication, payments, maps, analytics, communications, security, or other service functions.
2.4 Purposes of collection, use, and disclosure
We use personal information for the following purposes:
- Create, verify, administer, and secure accounts.
- Provide and personalize lists, maps, recommendations, rankings, trip-planning tools, sharing, and preferences.
- Process Community Contributions, investigate reports, maintain moderation history, and improve repository quality.
- Provide support, troubleshoot errors, monitor performance, prevent fraud, detect abuse, and investigate security incidents.
- Administer trials, subscriptions, billing, taxes, receipts, cancellations, refunds, and account entitlements.
- Send account, security, service, transaction, and support communications.
- Send optional product news, travel inspiration, or promotional communications where consent or another lawful basis applies.
- Measure service use, understand feature performance, improve usability, and develop new features.
- Comply with legal obligations, enforce agreements, protect rights and safety, respond to lawful requests, and manage disputes.
- Maintain backups, audit records, business continuity, and records required by law.
2.5 Consent and choices
We seek consent in a form appropriate to the sensitivity of the information and the purpose. Some information is required to create an account or provide a requested feature. Optional information and optional communications can be declined or withdrawn, subject to legal or contractual restrictions and reasonable notice.
You may update many preferences through your account. Withdrawal of consent may limit features that depend on the information. We may collect, use, or disclose information without consent where law permits or requires it.
2.6 Email and electronic communications
We may send transactional messages needed for account verification, security, purchases, service operation, support, or changes to important terms. Optional commercial electronic messages are sent only where we have the consent or other authorization required by law. Commercial messages will identify the sender and include an unsubscribe mechanism where required.
Unsubscribe requests apply to optional commercial messages. You may still receive necessary account, security, transaction, and service notices.
2.7 Cookies and similar technologies
We use cookies and similar technologies as described in the Cookie Notice. Essential technologies support login, security, preferences, and core service operation. Analytics, advertising, or affiliate technologies will be used subject to available controls and any consent required by law.
2.8 Sharing and service providers
We may disclose personal information to service providers that perform hosting, database, storage, authentication, email, customer support, error monitoring, mapping, analytics, security, payment processing, and related functions. We limit disclosure to what is reasonably needed for the service and use contractual or other safeguards appropriate to the circumstances.
We disclose shared-trip information to recipients selected by the trip owner. We may also disclose information when required by law, to investigate unlawful activity, to protect rights or safety, in a business transaction permitted by law, or with your consent.
We do not sell personal information to advertisers.
2.9 International processing
Some service providers may process or store personal information outside Manitoba or outside Canada, including in the United States or other countries where a provider operates. Information processed in another jurisdiction may be subject to the laws and lawful access powers of that jurisdiction. You may contact the Privacy Officer for information about relevant service-provider categories and foreign processing.
2.10 Retention
We retain personal information only as long as reasonably required for the purposes described in this policy, legal and tax obligations, security, fraud prevention, support, dispute resolution, moderation, audit history, and business continuity.
Retention depends on the record. Account and travel content is generally retained while an account is active. Deleted-account information may remain for a limited period in backups, security logs, transaction records, legal holds, or records needed to prevent abuse. Public contributions incorporated into the repository may remain as editorial records unless removal is required by law. We securely delete, anonymize, or restrict information when retention is no longer justified.
2.11 Safeguards
We use administrative, technical, and organizational safeguards appropriate to the sensitivity, amount, format, and use of the information. Measures may include access controls, authentication, encryption in transit, logging, backups, provider controls, least-privilege access, and security review. No online system can guarantee absolute security.
2.12 Privacy incidents
We maintain procedures to assess and respond to suspected privacy and security incidents. Where required by law, we will report a breach to the appropriate regulator, notify affected individuals, notify relevant organizations that may reduce the risk of harm, and keep required breach records.
2.13 Access, correction, export, and deletion
You may update many account and travel settings directly. You may also request access to personal information under our control, correction of inaccurate information, an available export, or deletion of an account by contacting legal@bucketlistplanner.ca.
We may require identity verification. Access, deletion, or export may be limited by legal privilege, another person’s privacy, security, fraud prevention, contractual records, legal retention duties, backup cycles, public editorial records, or other lawful exceptions. We will explain a refusal where required by law.
2.14 Children
The service is intended for adults. A person under 18 may use the service only through an account created and supervised by a parent or legal guardian. We do not knowingly invite a child to create an independent account. A parent or guardian who believes a child provided personal information contrary to this policy should contact legal@bucketlistplanner.ca.
2.15 Business transfers
Personal information may be disclosed and transferred as part of a proposed or completed financing, reorganization, merger, sale, or transfer of all or part of the business, where permitted by law and subject to appropriate confidentiality, use, safeguard, and consent requirements.
2.16 Changes to this policy
We may update this Privacy Policy to reflect changes in law, technology, service features, or information practices. We will post the revised policy and update the effective date. We will provide additional notice or obtain consent where required for a material change.
2.17 Contact and complaints
Privacy questions, access requests, correction requests, deletion requests, and complaints may be sent to:
Privacy Officer
BucketListPlanner.ca
Email: legal@bucketlistplanner.ca
We will review concerns and respond within the period required by applicable law. You may also contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over the matter.