Maple Leaf Adventures is committed to your right to privacy. This Privacy Notice explains how we process information about you (“personal data”) collected though our websites, microsites, or mobile sites that expressly adopt, display or link to this Privacy Notice (collectively, the “Website”) or that Maple Leaf Adventures collects from you when you purchase products online and offline on the ship. It also applies to data processed via our “Social Media Pages” which are the official social media pages we operate on Facebook, Instagram, LinkedIn, YouTube.
Data controller
For data processed on the Website, Maple Leaf Adventures is the controller of your personal data. We are based at 1110 Government St #209, Victoria, BC V8W 1Y2.
Personal data we collect about you
We may collect the information described below directly from you, from third parties we partner with, or through cookies or other automated means.
The data is collected directly from you whenever you: visit our website; contact us with questions or comments; engage our services; upload content to our website or Social Media Pages; or fill out any forms on our website or Social Media Pages.
Information that may be provided directly by you includes:
- Contact Data such as name, gender, shipping address, email address, and phone number.
- Data Regarding an Order such as purchasing history.
- Payment Data such as bank details, credit card number, and billing address.
- Marketing Data such as marketing preferences, or survey responses.
- Request and Claim Data such as details about returns or exchanges.
- Emails or Contact Forms such as electronic communications that you have sent us.
- Product Reviews such as the personal data you may share while providing a product review.
Other sources from which we collect data about you are as follows:
- Your device or browser: Certain information is automatically collected from your device or browser and analysed when you visit our Website, interact with our Social Media Pages or online advertising, or open our emails.
- Third Parties: We work with third parties who provide services to us such as analytics or advertising companies. Your information may be collected and processed independently in accordance with the third party’s own privacy notices. These third parties share information they have collected with us. We may combine this information with any information we collect.
- Social Media Platforms: Social media platforms share information, which is typically aggregated and doesn’t include personal information, with us. You can learn more about how social media platforms collect and use your information by reviewing their privacy policies and settings.
- Cookies: We use cookies (small data files stored on your device or browser) and other similar technologies to automatically collect information when you visit our website or interact with our emails. Through the use of cookies, we may link information about your interactions with our website or emails over time. Any information collected by us or by third parties through the use of cookies or similar technologies may be linked with other information we collect about you.
Information that may be collected about you from the above sources include:
- Technical Data such as device type, web browser, IP address, accessibility options.
- Usage Data such as account log ins, site navigation, clicks and browsing time.
- Location Data when using the website.
- Preference Data such as products and activities you have indicated an interest in, preferred language.
- Social Media/Third Party Data such as your social media handle and activity on Social Media Pages.
How we process your personal data
To manage and fulfil your orders:
Data Processed: Contact, Order and Payment Data
To manage your payment, we use trustworthy third parties that seek to ensure a secure and easy payment. They collect your Payment Data according to their Privacy Notices.
Legal Basis for Processing: Performance of our contract and compliance with legal obligation.
To provide access to our products:
Data Processed: Contact, Order and social media/Third party Data
Legal Basis for Processing: Performance of our contract, compliance with legal obligation, legitimate interest to improve quality of service.
To manage your account should you create one:
Data Processed: Contact & social media/Third party Data
Legal Basis for Processing: Performance of our contract & legitimate interest to promote our products/services
For bookkeeping purposes:
Data Processed: Order and Payment Data
Legal Basis for Processing: Performance of our contract & compliance with legal obligation
For analytics:
Data Processed: Typically, Aggregated Data that may not be linked to you, however, we may use Order & Preference Data
Legal Basis for Processing: Legitimate interest to improve quality of services.
On a case-by-case basis, we may also use your personal data for subsequent purposes that are compatible with the purpose that the data originally was collected for such as knowledge management, handling of potential claims and proceedings and handling of requests from supervisory authorities.
Who we share or disclose your personal data with
Maple Leaf Adventures may disclose your data to different legal entities.
- Service Providers: We partner with third parties to assist with many aspects of our business, including fulfilling orders, advertising, analyzing your interests and activity on our Website, and helping us communicate with customers. These third parties may provide services related to any of the purposes described in How We Process Your Personal Data, and we may share with them any types of information described in Personal Data We Collect About You. We may also receive information collected by these third parties and combine it with the information we have collected. Your information may also be collected and processed by third parties, such as the payment providers you select, who will process your information independently in accordance with their own privacy notices.
- Marketing Providers: We partner with third parties to assist with the advertising and marketing of our business. We may share with them the types of information described in Personal Data We Collect About You. We may also receive information collected by these third parties and combine it with the information we have collected.
- Parties to a Business Transaction: If we are ever merged with or acquired by another company or are involved in a corporate reorganization or other change in corporate control, your information could be shared with that business entity.
- Disclosures Required by Law: We may also share personal data where required by law. This may include disclosing personal data to public authorities, such as tax authorities, or disclosing personal data in connection with legal proceedings.
As the recipients mentioned above may be established anywhere in the world, the personal data may be transferred globally. Where we transfer your personal data across national boundaries, we will protect your information by ensuring that those transfers are made in compliance with applicable data protection laws. If data originating from the EEA is transferred to countries outside the EEA, we will adopt appropriate safeguards to protect the privacy by means of agreements (Standard Contractual Clauses), supplementary measures for international transfers or by transferring it to a country that offers an adequate level of protection. You may receive a copy of the relevant parts of the agreements by contacting us.
Categories of Personal Data Disclosed for a Business Purpose
We share Personal Data about you with service providers and third parties for business purposes, such as operational purposes and other purposes related to providing you with the services you seek from us. For more information about the business purposes for which we disclose Personal Data, see the How We Process Your Personal Data Section and the Personal Data We Collect About You Section for what types of information may be shared.
How long we store your personal data
We will retain your personal data for as long as necessary for the purposes for which we collect it. The precise period will depend on the purpose for which we hold your information, and these are the criteria that we use to determine when we will delete your data:
- We retain data to the extent required by law (such as tax/bookkeeping laws);
- We retain data such as Contact Data, Order Data, Payment Data, Request and Claim Data, and Communication Data to the extent relevant for limitation periods for potential claims (typically two to five years after date of a purchase);
- We retain data such as Contact Data, Order Data, Marketing Data, Location Data and Preference Data as long as you have consented to receive marketing communication from us;
- We retain Product Review Data as long as a product is available on our website or if you request to delete your review before that;
- We retain data collected through cookies;
- We endeavour to delete other data two years after your last interaction with us (such as last purchase or last communication) or directly after you have deleted your profile on our website, however we keep the invoices data as per statutory requirements.
Contact information
You can contact us for any queries about processing of your personal data in our capacity as the controller:
- by email at: admin@mapleleafadventures.com
- by post addressed to our office: 1110 Government St #209, Victoria, BC V8W 1Y2