Data Protection

1. Our Commitment to Data Protection

TripPlania is committed to protecting your personal data and respecting your privacy rights. We comply with applicable data protection laws, including PIPEDA (Personal Information Protection and Electronic Documents Act) in Canada.

2. Data Collection Principles

We follow these core principles:

• Lawfulness: We collect data only for legitimate purposes
• Minimization: We collect only necessary information
• Accuracy: We keep your data accurate and up-to-date
• Security: We protect your data with appropriate safeguards
• Transparency: We are clear about how we use your data

3. Your Data Protection Rights

Under Canadian privacy law, you have the right to:

• Access: Request information about what personal data we hold
• Correction: Ask us to correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Withdraw Consent: Withdraw your consent at any time
• Object: Object to certain types of data processing

4. Data Security Measures

We implement comprehensive security measures to protect your data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure hosting infrastructure
• Employee training on data protection

5. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes. Trip data stored locally in your browser remains under your control.

6. International Data Transfers

If we transfer your data outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

7. Data Breach Response

In the unlikely event of a data breach, we will notify affected users and relevant authorities as required by law, and take immediate steps to contain and remediate the breach.

8. Children's Privacy

TripPlania is not intended for children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

9. How to Exercise Your Rights

To exercise your data protection rights, contact us at:

10. Complaints

If you have concerns about how we handle your personal data, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca