Privacy Policy
Effective date: 2026-01-01 • Last updated: 2026-01-01
What we collect
We collect only what is necessary to run our tours and website efficiently.
- Contact details you provide in forms: name, email, phone (optional), message contents.
- Booking preferences saved locally in your browser (e.g., favourites, cart, recent views) using localStorage.
- Basic device and usage insights in aggregated form (pages visited, time on page) for service improvement.
- Consent choices for cookies and marketing preferences.
We do not intentionally collect sensitive information. Please avoid including such data in free text fields.
How we use data
We use your data to operate our services and communicate with you.
- Responding to inquiries and booking requests.
- Operating, maintaining, and improving the website and tour offerings.
- Personalizing on-site content based on your saved preferences.
- Meeting legal obligations and preventing abuse or fraud.
We do not sell personal data. Limited service providers may process data strictly on our instructions for hosting or email delivery.
Legal basis & retention
Depending on your location, our processing is based on one or more of the following:
- Contract: to provide requested tours or respond to your inquiries.
- Legitimate interests: to secure, maintain, and improve our services.
- Consent: for optional cookies or communications where required.
- Legal obligation: to comply with applicable laws.
Retention
- Form submissions: typically 12 months after last contact, unless a booking is made or the law requires longer.
- Cookie and preference records: 6–24 months, depending on category and regulation.
- Aggregated analytics: may be retained without personal identifiers.
Analytics
We use minimal, privacy-friendly analytics to measure aggregate traffic and popular content. No cross-site tracking or advertising profiles are created.
- Page views, session duration, device type (aggregated).
- IP addresses are not stored in identifiable form; we avoid precise geolocation.
- Analytics cookies are disabled unless you consent.
Security
We apply reasonable administrative, technical, and physical safeguards.
- Encryption in transit (HTTPS) and restricted administrative access.
- Regular dependency updates and principle of least privilege.
- Incident response process for timely notification as required by law.
Your rights
Depending on your location and applicable law, you may have the right to:
- Access the data we hold about you.
- Request correction or deletion.
- Object to or restrict processing in certain cases.
- Withdraw consent where processing is based on consent.
- Portability of data in a structured, commonly used format.
To exercise these rights, contact us using the details below. We will verify your request and respond within a reasonable period.
Contact
For privacy requests or questions, reach us at:
Email: [email protected] • Phone: +1 (416) 555-0174
Toronto Walking Tours, Toronto, ON, Canada
Changes to this policy
We may update this policy to reflect operational, legal, or regulatory changes. Material updates will be highlighted on this page with a new effective date.