Who is responsible
Canada Hols is owned and published by Halabuda Labs Ltd., company number 17291056. Halabuda Labs Ltd. is the controller of personal information collected through this site.
For privacy questions or requests, email hello@canadahols.com. You can also contact the company through halabudalabs.com.
Where information comes from
Most information comes directly from you when you create an account, complete your profile, submit a route or photograph, make a report or contact us. WordPress creates the account record; security and hosting services create limited technical records when you use the site.
What we collect
- Member account: email address, chosen public name, encrypted password record, email-verification status, an over-18 declaration timestamp and the versions of the terms and privacy notice you acknowledged. We do not request or store your date of birth.
- Optional travel preferences: country or region, usual departure airport, planning stage, possible travel year, travel style and Canadian regions of interest. You may leave every one blank.
- Marketing choice: whether you actively asked for Canada Hols marketing emails, together with when, how and under which wording that choice was given or withdrawn.
- Community contributions: public name, private contact email, vehicle type, route or location, notes, photographs, permission confirmations, accepted policy versions and moderation history.
- Reports and requests: contact details needed to respond, the material concerned, your explanation, status and outcome.
- Technical and security data: an irreversible hash derived from a network address for short-term rate limiting, browser information, Turnstile results and ordinary hosting logs.
- Messages: information you send to our contact email.
We do not sell personal information, accept payment or use advertising trackers. Marketing emails have not started; messages will not begin until every email has a working unsubscribe link.
Purposes and lawful bases
Create and secure your accountPerformance of the member service you request and our legitimate interests in keeping the community accountable and secure.
Personalise Canada HolsOur legitimate interests in improving routes and recommendations using only the optional preferences you choose to provide.
Send marketing emailsYour separate consent. Refusing or withdrawing it does not affect any account feature.
Review and publish contributionsPerformance of the contributor agreement and our legitimate interest in running a useful, accountable travel community.
Prevent abuse and investigate reportsOur legitimate interests in security, safety, moderation and protecting rights; legal obligations where they apply.
Handle privacy requestsCompliance with legal obligations under data protection law.
What becomes public
If a contribution is approved, its chosen public name, route or photograph, vehicle type and submitted description can be seen worldwide. Your email, permission record, technical data and moderation history are not published. Do not include personal contact details, number plates, identifiable children or precise private locations in public material.
Who receives information
IONOS hosts this WordPress site and its database. Cloudflare Turnstile helps protect registration, contribution and reporting forms from automated abuse. Our email provider handles messages sent to hello@canadahols.com and account emails. Public map pages request tiles from OpenStreetMap; credited image links may take you to Wikimedia Commons or Pexels. We may also disclose limited information where law requires it, to protect rights or safety, or to professional advisers under confidentiality.
International processing
Some service providers may process information outside the UK. Where a transfer is restricted by UK data law, we rely on the mechanism in the provider agreement, such as a UK adequacy regulation or approved contractual safeguards.
How long we keep it
- Member profiles are normally kept while the account remains active.
- Active marketing-consent evidence is kept while we rely on the consent. After withdrawal, we keep the minimum suppression and audit record needed to honour the choice.
- Rate-limit records are automatically eligible for deletion after seven days.
- Unreviewed contributions are normally deleted after 90 days. Rejected image files are removed promptly.
- Published contributions remain until removed. Permission and moderation records may be kept for up to six years after removal where needed for legal claims.
- Closed reports, takedown and privacy-request records may be kept for up to six years to demonstrate how they were handled.
- Ordinary correspondence is normally kept for up to three years unless a dispute or legal duty requires longer.
Provider logs and backups may persist for a limited additional period before deletion or overwrite.
Cookies and similar technology
Canada Hols currently uses only technology needed for sign-in, security, hosting and the service you request. We do not run advertising or optional analytics cookies. See the cookie notice for the current list.
Your choices and rights
You can edit optional preferences and withdraw marketing consent from your account. You can also use WordPress’s verified privacy export and erasure process by emailing hello@canadahols.com. Depending on the circumstances, you may have rights to access, correct or erase information, restrict its use, object to its use and receive portable information.
We respond without undue delay and normally within one month. Some rights are not absolute, and we will explain any lawful refusal and the available complaint route.
You can complain to the UK Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put things right first.
Your right to object
Where we rely on legitimate interests, you may object to that use based on your situation. We will stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the use is needed for legal claims. You can always object to direct marketing, and we will stop it.
Automated decisions
We do not make decisions about people using solely automated processing that produces legal or similarly significant effects. Turnstile and rate limiting help identify abuse, but publication and enforcement decisions are reviewed by a person.
Children
Member accounts and community uploads are for people aged 18 or over. We record an adult declaration rather than a date of birth. Do not upload photographs that identify a child or reveal a child’s location. If you believe a child’s information appears on the site, use our private reporting form.
Changes
We update the version, review date and wording when practices change. Material changes affecting members or contributors will be brought to their attention where reasonably possible.