Reserver.ca Inc. ("Reserver.ca", "we", "us") takes your privacy seriously. This policy describes how we collect, use, disclose and retain your personal information, in compliance with Quebec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information), Canada's PIPEDA, the EU's GDPR (for visitors from the EU), and Canada's Anti-Spam Legislation (CASL).
1. Data controller
The data controller for your personal information is Reserver.ca Inc., 4388 Rue Saint-Denis, Suite 200 #1050, Montréal (QC) H2J 2L1, Canada. Our Privacy Officer can be reached at partenaire@reserver.ca.
2. Information we collect
Information you provide: name, email address, phone number, mailing address, payment details (processed by GuestyPay / Stripe — Reserver.ca never stores your full card number), stay preferences, and the content of your messages.
Information collected automatically: IP address, browser and operating system, pages visited and time on page, referrer, strictly-necessary cookies and — with your consent — analytics (Google Analytics 4 in anonymized mode) and advertising-measurement cookies.
Information received from third parties: payment providers (GuestyPay), distribution platforms (Airbnb, Vrbo, Booking) when you book via those channels, and fraud-prevention services.
3. Purposes
We use your data to: (i) process and confirm your booking; (ii) send you practical information about your stay; (iii) respond to your requests; (iv) manage billing and tax compliance (GST / QST, CITQ accommodation tax); (v) improve security and prevent fraud; (vi) — only with your consent — send our newsletter, suggest relevant stays, or measure marketing campaign performance.
4. Legal basis
We process your data on the basis of: contract performance (booking, services), legal obligations (taxation, CITQ register, anti-money-laundering), our legitimate interest (site security, fraud prevention), or your explicit consent (newsletter, non-essential cookies).
5. Processors and transfers
We use carefully selected processors: Guesty (property management system, USA), GuestyPay / Stripe (payments, USA / Canada), Postmark (transactional email, USA), Cloudflare (CDN and security, worldwide), Google Workspace (team email, USA). All are bound by contract to a level of protection equivalent to Quebec's Law 25. When your data leaves Quebec, we assess the risk in advance pursuant to Section 17 of Law 25.
6. Retention
Booking records: 7 years (tax requirement). Lead contact info (revenue estimator, contact form): 24 months without further interaction, then automatic deletion. Analytics cookies: 14 months. You can request earlier deletion at any time.
7. Your rights
You have the right to: access your information, rectify it, request deletion, withdraw consent, request portability, object to automated processing and opt out of profiling. To exercise these rights, contact our Privacy Officer at info@reserver.ca. We will respond within 30 days. If you are not satisfied, you may file a complaint with Quebec's Commission d'accès à l'information (cai.gouv.qc.ca).
8. Security
All site communications are encrypted with TLS 1.3. Payments are processed by GuestyPay / Stripe (PCI-DSS Level 1). Internal data access is limited to staff with a need-to-know, audit-logged, and requires two-factor authentication.
9. Cookies
Strictly-necessary cookies (session, cart, language): used without prior consent, as permitted by Law 25. Analytics and advertising-measurement cookies: only set after your explicit consent, which you can withdraw at any time via "Cookie preferences" in the footer.
10. Updates
This policy may be updated. The last-updated date is shown at the bottom of this page (2026-05-12). Substantive changes will be notified by email to users with an active account.
For any question about this document, please email us at info@reserver.ca.
