Your information.
Handled carefully.

When you send a message to the trip companion, we send your message, recent chat history and a limited trip outline (dates, traveller count, vehicle and planned place names) to OpenAI to generate travel suggestions. Booking references, private itinerary notes, your email address and account ID are not automatically included. Please leave personal, payment and booking details out of messages.

Chat history and unfinished planning are temporarily kept in this browser tab for up to 24 hours so you can return after navigating away. Use Save to keep your itinerary in your account. Suggestions you add and save become part of your private itinerary. We ask OpenAI not to store responses for later retrieval; this is not a guarantee of zero provider retention. See OpenAI API data controls for provider processing details.

Daily member and site request counters limit usage and expire after two days. Expedia links open Expedia when clicked; destination searches include the named place, without your private booking details. Expedia handles its own search and booking information.

Canada Hols is owned and published by Halabuda Labs Ltd., company number 17291056. Halabuda Labs Ltd. is the controller of personal information collected through this site.

For privacy questions or requests, email hello@canadahols.com. You can also contact the company through halabudalabs.com.

• Member account: email address, chosen public name, encrypted password record, email-verification status, a private random member identifier, an over-18 declaration timestamp and the versions of the terms and privacy notice you acknowledged. We do not request or store your date of birth.
• Optional travel preferences: country or region and its standard two-letter country code, usual departure airport, planning stage, possible travel year, travel style and Canadian regions of interest. You may leave every one blank.
• Private itinerary drafts: trip dates, traveller count, vehicle type, flights and other connections, chosen Canadian places, map coordinates, stays, campsites, experiences, food or fuel stops, notes, links and any booking references you choose to enter. These drafts are visible only within your account and to authorised site administrators.
• Marketing choice: whether you actively asked for Canada Hols marketing emails, together with when, how and under which wording that choice was given or withdrawn.
• Community contributions: public name, private contact email, vehicle type, route or location, notes, photographs, permission confirmations, accepted policy versions and moderation history.
• Aggregate site activity: daily counts for page paths and broad actions such as planner choices, route opens, Atlas layers, device category and outbound destination hostname. These counters do not contain a visitor identifier, raw network address, full referrer URL or account identity.
• Reports and requests: contact details needed to respond, the material concerned, your explanation, status and outcome.
• Technical and security data: an irreversible hash derived from a network address for short-term rate limiting, browser information, Turnstile results and ordinary hosting logs.
• Messages: information you send to our contact email.

We do not sell personal information, accept payment or load advertising trackers on our pages. Marketing emails have not started; messages will not begin until every email has a working unsubscribe link.

If you follow an Expedia hotel or flight referral link, you leave Canada Hols and open Expedia through its affiliate referral service. The link identifies our referral relationship and the accommodation destination, arrival gateway or multi-city search page you selected. Your browser makes an ordinary connection to that service and may send our site origin as the referrer.

We do not add your member identity, private itinerary, notes, booking references or travel dates to these links. Our own click counter keeps only daily totals by provider, page section and accommodation destination or arrival-gateway/search-type label. Partner click counts cover guests and members, excluding administrators. We count hotels, flights, car hire and eSIM links by provider, product, public page, placement and destination category. Ordinary search links are distinguished from affiliate links. Account cookies may be checked to exclude administrator testing; no member identity is stored with click totals. Private trip details and outbound search parameters are not collected. Your home airport and travel dates are entered on Expedia and are not collected by this counter. Expedia may use its own cookies and referral tracking after you follow the link, subject to its privacy notice and consent choices. No Expedia widget or tracking script loads on Canada Hols pages.

Canada Hols does not currently send member-account information to Expedia, KAYAK, Stripe or another booking or payment provider. The account system is designed so a future connection can use the private member identifier and store a separate provider reference without changing your public name or password.

If we add booking or payment features, we will explain the provider and the information needed before you use that feature. Booking-only details, such as a traveller's legal name, telephone number, billing address or payment information, will be requested at the relevant booking or checkout step rather than made compulsory at registration. Canada Hols will not store card details in its WordPress account records.

Canada Hols runs its own aggregate counter inside WordPress. It records that an action happened on a date and groups it by a broad label: for example a page path, planner starting city, Atlas layer, mobile or desktop category, the hostname of a site followed from an external link, or fixed referral provider, page-section and accommodation destination or arrival-gateway/search-type labels.

It does not set an analytics cookie, create a persistent browser or device identifier, store a raw IP address, retain a full referring page or join activity to a member account. Recognised automated crawlers and signed-in administrators are excluded where practical. The figures therefore describe interactions, not unique people.

• Member profiles and saved private itineraries are normally kept while the account remains active. You can delete an itinerary from the builder at any time.
• Active marketing-consent evidence is kept while we rely on the consent. After withdrawal, we keep the minimum suppression and audit record needed to honour the choice.
• Aggregate analytics counters are kept for up to 400 days.
• Rate-limit records are automatically eligible for deletion after seven days. AI request counts and last-use times linked to member accounts are retained for a rolling 30-day review window to identify unusually high usage. Administrators can review these counts; chat messages are not stored in this usage report. Expired usage metadata is removed by scheduled daily cleanup.
• Unreviewed contributions are normally deleted after 90 days. Rejected image files are removed promptly.
• Published contributions remain until removed. Permission and moderation records may be kept for up to six years after removal where needed for legal claims.
• Closed reports, takedown and privacy-request records may be kept for up to six years to demonstrate how they were handled.
• Ordinary correspondence is normally kept for up to three years unless a dispute or legal duty requires longer.

Provider logs and backups may persist for a limited additional period before deletion or overwrite.

You can edit optional preferences and withdraw marketing consent from your account. You can also use WordPress’s verified privacy export and erasure process by emailing hello@canadahols.com. Depending on the circumstances, you may have rights to access, correct or erase information, restrict its use, object to its use and receive portable information.

We respond without undue delay and normally within one month. Some rights are not absolute, and we will explain any lawful refusal and the available complaint route.

You can complain to the UK Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put things right first.