Privacy Statement

Introduction

Humber Bay of Islands (“we,” “our,” “us”) is committed to protecting your privacy and ensuring that your personal data is handled responsibly. This Privacy Statement explains how we collect, use, store, and protect your information when you visit our website or interact with our services.

We comply with applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for international visitors, the General Data Protection Regulation (GDPR).

Information We Collect

We may collect the following categories of personal data:

Contact Information: such as your name, email address, and phone number.
Usage Data: including IP address, browser type, pages visited, and time spent on the site.
Cookies & Tracking Technologies: to improve website functionality, analyze performance, and (with consent) deliver relevant advertising.
Voluntary Information: details you provide when signing up for newsletters, filling out forms, or contacting us.

How We Use Your Information

We process your personal data for the following purposes:

To provide and improve our website and services.
To communicate with you, respond to inquiries, or send newsletters (with your consent).
To analyze usage patterns and improve user experience.
To comply with legal obligations.
For marketing purposes, if you have consented.

Legal Basis for Processing (GDPR)

For visitors from the EU/EEA, we rely on one of the following legal bases for processing personal data:

Consent – when you agree to receive marketing communications or accept cookies.
Contractual necessity – when we process data to provide a service you requested.
Legal obligation – to comply with applicable laws.
Legitimate interests – to maintain and improve our website, provided your rights are not overridden.

Sharing of Information

We do not sell or rent personal data. We may share information only with:

Trusted service providers who assist in website hosting, analytics, or communications.
Legal authorities when required to comply with applicable law.
Business partners if you consent to marketing or promotions.

All third-party processors are required to protect your data in accordance with this statement.

International Data Transfers

As a Canadian business, your data may be stored in Canada or transferred to other jurisdictions where our service providers operate. We take steps to ensure appropriate safeguards are in place, consistent with GDPR requirements.

Data Retention

We keep your personal data only as long as necessary for the purposes described above, or as required by law. When no longer needed, data is securely deleted or anonymized.

Your Rights (Under GDPR & PIPEDA)

You have the following rights regarding your personal data:

Access your data.
Request correction of inaccurate information.
Request deletion (“right to be forgotten”).
Restrict or object to processing.
Withdraw consent at any time (without affecting prior lawful processing).
Data portability (receive a copy of your data in a usable format).
File a complaint with a supervisory authority (in your country or with the Office of the Privacy Commissioner of Canada).

To exercise these rights, please contact us at: humberbayofislandstourism@gmail.com

Security

We use appropriate technical, administrative, and physical safeguards to protect personal data against unauthorized access, disclosure, or misuse. However, no system is 100% secure, and we cannot guarantee absolute protection.

Children’s Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from them.

Updates to This Privacy Statement

We may update this Privacy Statement periodically. Any changes will be posted on this page with the updated “last revised” date.

Last revised: October 22, 2025