Privacy policy

Thoosie Tours ("Thoosie", "we", "us") is responsible for personal information collected through our website, accounts, inquiries, mailing lists, and bookings. This policy explains what we collect and why. For privacy questions or requests, contact info@thoosie.club and mark your message "Privacy".

1. Information we collect

• Account information: your name, email address, email-verification status, account creation and update dates, and authentication records. If you choose password sign-in, an authentication record stores a password hash rather than your readable password.
• Session and security information: sign-in tokens, session dates, and, where available, IP address and browser or device information used to manage sessions and protect account access.
• Booking information: the lead traveler's first and last name and email address, traveler count, room choice, selected tour, and any phone number, country, or booking notes you provide. We also keep booking status, amounts due and paid, and payment references.
• Inquiries: your name, email address, selected topic, message, and whether you asked for marketing updates.
• Mailing-list information: your email address, subscription preferences, and signup source. A tour priority-list signup also records the tour, traveler count, and your account identifier if you are signed in.
• Website usage and anti-spam information: technical and usage information processed by Cloudflare to operate the website, provide aggregate analytics, and check form submissions for abuse.

Please provide only information needed for your request or booking. Avoid sending payment-card details, passwords, passport copies, or unnecessary medical information in messages or booking notes. Contact us first if you need to discuss sensitive travel or assistance requirements.

2. How we use information

We use personal information to create and secure accounts, authenticate sign-ins, manage bookings and payments, provide travel and service updates, respond to inquiries, maintain business records, prevent fraud and spam, and meet legal obligations. Website usage information helps us understand site performance and improve the service.

If you choose to join a newsletter or tour priority list, we use the information to send the updates you requested. Account creation and booking do not automatically enroll you in the newsletter. We seek separate consent for optional marketing and for materially different uses where required by law. Refusing optional marketing does not prevent you from using an account or booking a tour.

3. Service providers and other disclosures

We use service providers to deliver the website and our services:

• Cloudflare hosts the website and database, provides caching and security services, and supplies Turnstile spam protection and Web Analytics.
• Stripe processes payments. Payment-card details are entered through Stripe's checkout; our booking database stores payment amounts, status, and Stripe references rather than full card numbers or card security codes.
• Resend delivers account and booking emails and manages newsletter contacts and subscriptions. Our newsletter list is maintained in Resend.

When needed to fulfill your booking, relevant traveler details may also be shared with the hotels, transport providers, parks, and other suppliers involved in your departure. We limit disclosure to information needed for the relevant service. We may disclose information where legally required or permitted, including to address fraud or protect legal rights. We do not sell your personal information.

Service providers and travel suppliers may process information outside your province or Canada, including in the countries on your itinerary. Information processed abroad may be accessible to authorities under local laws. Contact us if you would like more information about the providers handling your information.

4. Cookies, security checks, and analytics

Account sign-in uses cookies and similar session information to keep you authenticated and protect access. Blocking these cookies may prevent account features from working. Cloudflare Turnstile processes browser and technical signals to check for automated or abusive submissions.

We use Cloudflare Web Analytics for aggregate website measurements. The analytics service is designed to work without analytics cookies. Account session cookies and security processing are separate from those measurements.

5. Retention and security

We retain personal information for as long as reasonably needed for the purposes described here, including providing an active account, administering travel, resolving disputes, and meeting legal and accounting obligations. Different records may need different retention periods. When information is no longer needed, it should be deleted or anonymized; contact us to request a review of information we hold about you.

Account access controls, password hashing, and restricted administrative access help protect personal information. No online service or transmission can be guaranteed completely secure. Keep your credentials private and contact us promptly if you suspect unauthorized access.

6. Your choices and requests

You can request access to your personal information, ask us to correct inaccurate details, request account closure or deletion, or ask about withdrawing consent by emailing info@thoosie.club. We may need to verify your identity before acting on a request. Please do not send identity documents unless we arrange a suitable method with you.

We will respond in accordance with applicable privacy law and explain any legal reason we cannot fulfill a request. Some information may need to be retained for payment records, legal obligations, or disputes. Withdrawing consent for information necessary to provide a service may prevent us from continuing that service; we will explain the consequences. Account closure does not itself cancel an existing booking.

You can unsubscribe from newsletter emails using their unsubscribe link. To leave a tour priority list or change the updates you receive, contact us. Unsubscribing from marketing does not stop essential account, payment, or booking messages.

If you have a privacy concern, contact us so we can investigate. You may also contact the Office of the Privacy Commissioner of Canada or another privacy authority with jurisdiction.

7. Updates to this policy

We may update this policy when our services or practices change. We will update the date above and provide appropriate notice of material changes. Where a new use or disclosure requires consent, we will obtain it before proceeding.