Privacy Policy

Last updated June 30, 2020

As providers of Stack Travel providing online and call-center travel booking services, we recognize that maintaining our customer's trust is the most important thing we can do. We respect your privacy and we maintain privacy policies and procedures that reinforce our commitment to you.

By visiting this website, you are accepting the practices described herein.

Should you provide certain Personal information through the www.stacktravel.ca website, please see the privacy policy (the “Privacy Policy”) below.

Should you respond to any advertising or promotional material from www.getstack.ca or any other part of the Stack Fintech Inc platforms, any Personal information that is collected will be subject to the Stack privacy policy, available at https://api.getstack.ca/privacyPolicy

This Privacy Policy applies to 8742995 Canada Inc. doing business as the Stack Travel or its affiliates, and also referred to in this Privacy Policy as "we", "us" and "our". This Privacy Policy sets out what information we may collect from you, how we will retain it, how you can access it and/or remove it, and how we may use and share it.

What is “Personal information”?

"Personal Information" as used in this Privacy Policy means information about an identifiable individual, such as the name and date of birth of that individual and includes non-personal information that we link to Personal Information. This Privacy Policy does not apply to the collection, use and disclosure of Personal Information by the companies with which we have business relationships. However, if we receive from such entities Personal Information or non-personal information that we link to Personal Information, then this Privacy Policy will apply to our collection, use and sharing of that information. This Privacy Policy does not cover non-personal information, which is information that does not identify you. However, as stated above, when we collect non-personal information and link that non-personal information to an identifiable individual, then that information will become Personal Information and become subject to this Privacy Policy. We also collect and store any “billing information”, including credit card or payment details, provided to us. The information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your Personal information.

When do we collect your Personal information?

We may ask for Personal Information from you in a number of circumstances:

  • when you make a travel booking with us or purchase any other product or service from us, whether online, by telephone or by any other means;
  • when you contact us to discuss a booking or make use of any of our online services;
  • when you register for any loyalty program or subscribe to our e-mail notification service;
  • when you enter competitions, sweepstakes or register for promotions; and
  • when you take part in surveys or provide us with feedback or questions.

In some cases, we may use other available information about you (for example from credit reference agencies, anti-fraud screening services, publicly available on-line information and CCTV) for the purposes listed below.

When visiting our website, we also automatically collect session information about your computer (e.g., your IP address, Web browser software (such as Firefox, Safari, Chrome or Internet Explorer), and referring website). We also may collect information about your online activity, such as trips viewed and bookings made. We use this automatically collected information to customize your user experience, to inhibit fraud, and to serve advertisements and special offers and other information that may be of interest to you. In some countries, including countries in the European Economic Area, this information may be considered "personal data" under applicable data protection laws.

Why do we collect Personal information?

We collect Personal information to help us manage your travel arrangements, and deliver services to you, including:

  • to fulfil any existing and/or future travel arrangements you make with us including necessary reservation, payment and ticketing arrangements and any administration associated with the travel arrangements (exceptionally this may include sensitive personal data, for example relating to your health or disabilities). You recognize that, by providing us with such sensitive personal data, you give your explicit consent to us to process such data for the purposes set out in this Privacy Policy;
  • to provide any other product or service you have purchased from us;
  • to answer any queries or requests you have regarding your travel arrangements, and manage any amendments you may wish to make to travel arrangements or changes we need to advise you about;
  • to fulfil security, customs, immigration and border control requirements associated with your travel arrangements, which may include providing information to relevant police enforcement and appropriate government agencies;
  • to make information available to appropriate third parties where necessary, and in the event of an emergency;
  • to provide you with information about products, services and promotions that may be of interest to you unless you have asked us not to contact you;
  • to ensure that content from our website is presented in the most effective manner for you and for the device for which you are accessing the information;
  • for quality assurance testing, market analysis, industry studies, systems testing, analysis of statistics, benchmarking, auditing, analyzing performance measures, and preparing and distributing products and services with anonymized aggregate data and information (which may include monitoring or recording your telephone conversations with us for the purposes set out in this notice);
  • for arranging and administering any relevant insurance products;
  • for payment card verification and anti-fraud screening; and
  • for administrative and legal purposes (including billing, handling complaints, claims and legal proceedings) and to apply our terms & conditions.

The email address you provide for order processing may be used to send you information and updates pertaining to your order, in addition to receiving occasional company news, updates, related product or service information, etc.

Legal basis for processing under the General Data Protection Regulation (EU) 2016/679 (the “GDPR”)

Under the GDPR, our legal basis for collecting and using the Personal information described above will depend on the Personal information concerned and the specific context in which we collect it.

However, we will normally collect Personal information from you only (i) where we need the Personal information to perform a contract with you, (ii) where the processing is in our legitimate interests and not overridden by your rights, or (iii) where we have your consent to do so. In some cases, we may also have a legal obligation to collect Personal information from you or may otherwise need the Personal information to protect your vital interests or those of another person.

If we ask you to provide Personal information to comply with a legal requirement or to enter into a contact with you, we will make this clear at the relevant time and advise you whether the provision of your Personal information is mandatory or not (as well as of the possible consequences if you do not provide your Personal information).

If we collect and use your Personal information in reliance on our legitimate interests, this interest will normally be to operate our platform, provide our services and communicate with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to your queries, improving our platform or services, undertaking marketing, or for the purposes of detecting or preventing illegal activities. We may have other legitimate interests and, if appropriate, we will make clear to you at the relevant time what those legitimate interests are.

We will obtain consent when we want to use Personal Information for a new purpose or for a purpose other than those stated at the time of collection, in this Privacy Policy or in the terms and conditions of the specific product, service, program, contest, promotion or event you signed up for, participated in or purchased. Consent can be "express" through words/actions or by specific acts or "implied" by the conduct of the individual whose Personal Information is being collected, used or shared. Unless we determine that we require an additional consent for specific products, services, programs, contests, promotions or events, you agree and consent that as our customer, we may collect, use, share or otherwise process your Personal Information in accordance with this Privacy Policy.

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal information, or would like to withdraw or limit your consent, you can contact us as described below in "Contacting Us About Your Privacy". If you have a product, service or program, such as an insurance privacy policy, or are participating in a contest, promotion or event, that is offered by a third party together with us, you may also have to provide your consent preferences or withdraw your consent with that third party separately. Please note that it may take some time for all of our records to reflect changes in your preferences. For example, if you request that you not receive personalized marketing communications from us, your preference may not be captured for a promotion already in progress.

Direct marketing

If you have opted in to receive direct marketing, either from us or a third party, you may be contacted from time to time with information which we think you may find of interest. We may also pass on your details to other internal parts of our organization so that they can tell you about products or services which may be of interest to you

Contact may be made by post, telephone, email or social media if you have indicated in the appropriate section of the registration process that you are willing to receive this information through the relevant channel.

How do we protect your information?

We implement a variety of technical and organizational security measures to maintain the safety of your Personal information when you place an order or enter, submit or access your Personal information, and we are committed to protecting the information we collect. While no website can guarantee data security, we have implemented appropriate administrative, technical and physical security procedures to help protect the Personal information provided to us. For example, only authorized employees are permitted to access Personal information, and they may do so only for permitted business purposes.

We also offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems and are required to keep the information confidential. We also employ firewalls and intrusion detection systems to help prevent unauthorized persons from gaining access to your information. After a transaction, your credit card information will not be stored on our servers.

Data retention

We retain Personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your Personal information, we will either delete or anonymize it or, if this is not possible (for example, because your Personal information has been stored in backup archives), then we will securely store your Personal information and isolate it from any further processing until deletion is possible.

Where do we keep your Personal information?

We store, access and use Personal Information in Canada. Unless there is a legal or regulatory requirement to keep such information in Canada, Personal Information may also be stored, accessed, or used outside of Canada. For instance, when we engage a service provider outside of Canada, Personal Information may be stored, accessed or used in any country where the service provider is located, or from which it provides services. Where Personal Information is located outside of Canada, it is subject to the laws of that jurisdiction.

Do we use cookies?

Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.

We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.

If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly. However, you can still place orders over the telephone.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your Personal Information. This does not include trusted third parties who assist us in operating our website, conducting our business or servicing you, so long as those parties agree to keep this information confidential. We also share your Personal Information with the following entities:

Suppliers, such as hotel, airline, car rental, and tour providers who fulfill your travel reservations. These suppliers are not controlled by us and Personal Information disclosed to them is subject to the applicable supplier's privacy policy and security practices.

Third-party Vendors, who provide services or functions on our behalf, including credit card processing, business analytics, customer service, marketing, distribution of surveys or sweepstakes programs, and fraud prevention. Third-party vendors have access to and may collect information only as needed to perform their functions and are not permitted to share or use the information for any other purpose.

Business Partner, and more particularly, Everything Zoomer and the Zoomer Media Digital Network, with whom we may jointly offer products or services.

Referring Websites, (for example, through a link you clicked on another site that directed you to this one).

Companies within our Corporate Family, we may share your Personal Information with our travel-related corporate affiliates. To the extent that our corporate affiliates have access to your information, they will follow practices that are at least as restrictive as the practices described in this Privacy Policy. They also will comply with all applicable laws governing the transmission of promotional communications.

We may also release your Personal Information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others' rights, property or safety.

If we sell, assign or transfer the assets of our respective businesses, or if our business is merged, or enters into a joint venture with another business entity, we reserve the right to sell or transfer the databases maintained by us (including any Personal information provided by you, provided we inform the buyer that it must use your Personal information only for the purposes disclosed in this Privacy Policy).

We may also disclose Personal information to any other person if you consent to the disclosure.

Your rights and dispute resolution

Our policy is to respond to access requests as required by applicable laws, however we may decline access to Personal Information in certain circumstances. These include where the information requested would reveal confidential information or Personal Information about someone else, or if legal or regulatory requirements prohibit providing access or permit not providing access to such information.

You have the following data protection rights:

  1. If you wish to access, correct, update or request deletion of your Personal information, you can do so at any time by contacting us using the contact details provided below.
  2. You can also ask us to restrict processing of your Personal information or request portability of your Personal information. Again, you can exercise these rights by contacting us using the contact details provided below.
  3. You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), please contact us using the contact details provided below. Note that we may retain certain information associated with your account, but which does not readily identify you, including for organizational record keeping integrity.
  4. Similarly, if we have collected and process your Personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal information conducted in reliance on lawful processing grounds other than consent.
  5. You have the right to complain to a data protection authority about our collection and use of your Personal information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

If the Privacy Officer is unable to address your concern to your satisfaction, arbitration may be an option recommended to you to settle the dispute. Arbitration is a form of dispute resolution. If the parties decide to pursue arbitration, then the parties would refer the dispute to an arbitrator who would take into account the evidence of each of the parties and render a decision.

Children's privacy

This website does not offer services directly to children. If we become aware that a child has sent us any Personal information, we will use that information to contact the child and inform him or her that we require parental consent before processing any Personal information.

Further information

Caricom API Data: Please note that some or all of the Caricom states listed below have entered into an agreement with the USA whereby advance passenger data, required by and provided to Caricom states for border security purposes, will be passed to the USA Department for Homeland Security for processing on behalf of those Caricom states listed as follows: Anguilla, Antigua and Barbuda, The Bahamas, Barbados, Belize, Bermuda, British Virgin Islands, Cayman Islands, Dominica, Grenada, Guyana, Haiti, Jamaica, Montserrat, Saint Lucia, St Kitts and Nevis, St Vincent and the Grenadines, Surinam, Trinidad and Tobago, Turks and Caicos Islands. Collectively members or associate members of ´Caricom´. The UK Information Commissioner's Office has accepted that this will not breach the Data Protection Act but that we are required to bring this to your attention.

US Secure Flight Data: The Transportation Security Administration (TSA) requires you to provide your full name, date of birth ,and gender for the purpose of watch list screening, under the authority of 49 U.S.C. section 114, the Intelligence Reform and Terrorism Prevention Act of 2004 and 49 C.F.R parts 1540 and 1560. You may also provide your Redress Number, if available. Failure to provide your full name, date of birth, and gender may result in denial of transport or denial of authority to enter the boarding area. TSA may share information you provide with law enforcement or intelligence agencies or others under its published system of records notice. For more on TSA privacy policies, or to review the system of records notice and the privacy impact assessment, please see the TSA Web site at www.tsa.gov.

Contacting us about your privacy

If there are any questions regarding this Privacy Policy, you may contact us using the information below.

2810 Matheson Blvd. East, Suite 300
Mississauga, Ontario
L4W 4X7
Attention: Privacy Officer
Email: privacy@travelnationcanada.com
Phone: (905) 268-1261

We reserve the right to update or alter this Privacy Notice from time to time without notice to you. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

margin: 0 0 30px 0; background-color: #fff;border-radius: 4px;box-shadow: 0 2px 4px 0 rgba(0, 0, 0, 0.06);padding: 7%;