Privacy Policy

1.About this policy

This Privacy Policy explains how SKRP Holdings ("Trip Centre", "we", "us") handles personal information when you visit our website, request a demo, or use the Trip Centre application to prepare for a trip, whether on your own or through an Outfitter, Camp or other outdoor organization (an "Organization").

We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and the private sector privacy laws of Alberta and British Columbia.

In this policy, "personal information" means information about an identifiable individual. It does not include business contact information used to communicate with someone about their work.

2.Our role and the Organization's role

Trip Centre is used in two ways, and who is responsible for your information depends on which one applies to you.

• Organization workspaces. When an Organization uses Trip Centre to publish preparation guidance, products and logistics for its customers, families or staff, the Organization decides what it asks people to do and is responsible for its relationship with them. We process information in that workspace on the Organization's behalf and under our agreement with it. The Organization's own privacy policy also applies, and you may contact the Organization directly about its practices.
• Your own Trips. When you create a Trip, with or without an account, including one you started from an Organization's link, we are responsible for that Trip information and this policy governs it.

3.Information we collect

Information you give us

• Demo and pilot requests: your name, work email, organization name and type, what you would like to explore and, if you choose, your organization's website and a description of how your team prepares people or Trips today.
• Accounts: your email address, a password (stored only as a one-way hash we cannot read) and your preferred language.
• Trip information: the Trip name, destination, dates, party size and activity, and the Packout, Food and Logistics details you add, such as gear, meals, reservations, permits, rentals, pickup and return times, confirmation references and notes.
• Organization staff: the email address used to invite you to an Organization and your role in it.
• Organization details: business information an Organization provides, such as Location names, addresses, phone numbers, email addresses, branding, preparation guidance, product catalogues and the address of its online store.

Trip notes and other free-text fields are for preparation details. Please do not enter health information, government identification numbers or information about other people that they have not agreed to share.

Information collected automatically

• Sign-in records: when you sign in, the IP address and browser type used, so we can keep your account secure and show you active sessions.
• Guest sessions: if you start a Trip without an account, a random identifier stored in a cookie connects that Trip to your browser. It contains no name or email address.
• Service logs and error reports: technical details such as pages requested, timestamps, browser type and error information, used to keep the service running and fix problems.
• Cookies: described in the Cookies section below.

Information we do not collect

Trip Centre does not take payments, so we never receive payment card details. Purchases happen on the Organization's own store. The core family preparation experience does not require a camper's name, medical information, registration record or family account. We do not sell personal information, and we do not use it for third-party advertising.

4.How we use information

We use personal information only for the purposes below.

• To provide Trip Centre: creating and saving Trips, showing an Organization's guidance and products, and keeping Packout, Food and Logistics lists up to date.
• To send service messages you need, such as account invitations, password resets and reminders about reservations, permits and rentals in your Trip.
• To respond to demo, pilot and support requests.
• To secure the service, prevent abuse and fraud, and investigate errors.
• To understand and improve how the service is used, using aggregated or de-identified information wherever possible.
• To meet legal obligations and enforce our Terms.

If we want to use personal information for a new purpose, we will tell you and, where required, ask for your consent first.

5.Consent

We rely on your consent to collect, use and share personal information as described in this policy. Depending on the sensitivity of the information and your reasonable expectations, consent may be express (for example, ticking an optional box or allowing analytics cookies) or implied (for example, entering trip details to build your Packout).

You may withdraw consent at any time, subject to legal or contractual restrictions, by changing your cookie settings, deleting Trips or contacting us to close your account. If you withdraw consent, some features may no longer work.

6.How we share information

We share personal information only in the following circumstances.

• With the Organization you choose. When you start a Trip from an Organization's link or use its guidance, the Trip is connected to that Organization so its recommendations, products and logistics can appear. When you choose to continue to an Organization's online store, we pass the products and quantities you selected so the store can prepare your order. Your purchase is then governed by that store's terms and privacy policy.
• With service providers who host, store, deliver or secure Trip Centre for us, listed below. They may use the information only to provide their service to us, and must protect it.
• For legal reasons, when required by law or to protect the rights, property or safety of Trip Centre, our users or others.
• In a business transaction, such as a merger, financing or sale of assets, where the information remains protected under terms consistent with this policy.

7.Where information is stored

Trip Centre is based in Canada, but our main hosting provider has no Canadian region, so personal information is stored and processed in the United States and may be processed in other countries where our service providers operate. While it is there, it may be accessible to courts, law enforcement and national security authorities under the laws of those countries.

Before transferring information outside Quebec or Canada, we assess whether it will receive adequate protection, and we use contracts and other measures to require service providers to protect it to a standard comparable to Canadian law.

8.Cookies and similar technologies

Cookies are small files a website stores in your browser. We use only the cookies needed to run the website and application. We do not use advertising cookies or cross-site tracking.

If we add analytics in the future, it will stay off until you allow it, and you can change your choice at any time using Cookie settings in the footer of every page.

These cookies are strictly necessary. You can block or delete them in your browser settings, but parts of the service, such as staying signed in or keeping Trips created without an account, will stop working.

9.How long we keep information

We keep personal information only as long as we need it for the purposes in this policy or as the law requires, then delete or anonymize it.

• Trips created without an account are deleted automatically after 90 days without use, unless you sign in and keep them.
• Account and Trip information is kept while your account is open. When you delete a Trip, or ask us to close your account, we delete the related information within a reasonable period, except where we must keep it for legal reasons.
• Sign-in records are removed when you sign out.
• Demo and pilot requests are kept for as long as the conversation is active and for up to two years afterwards, unless you ask us to delete them sooner.
• Organization workspace information is kept for the term of our agreement with the Organization and deleted or returned as that agreement provides.
• Backups are overwritten on a rolling schedule.

10.How we protect information

We use safeguards appropriate to the sensitivity of the information, including encryption in transit, hashed passwords, encrypted storage of store connection credentials, private databases, access limited to people who need it, and separation between Organization workspaces.

No system is perfectly secure. If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the appropriate privacy regulators as the law requires.

11.Your rights and choices

Subject to limited exceptions in the law, you have the right to:

• know what personal information we hold about you and how it is used and shared;
• access it and receive a copy, including in a commonly used technological format where Quebec law provides;
• correct information that is inaccurate or incomplete;
• withdraw consent and ask us to delete your information;
• ask us to stop disseminating your information or to de-index links associated with your name, where Quebec law provides; and
• make a complaint to us, and to a privacy regulator.

To make a request, email support@tripcentre.app. We may need to confirm your identity first, and we will respond within 30 days or tell you if we need more time and why. Requests about information in an Organization's workspace may be referred to that Organization.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or in Quebec the Commission d'accès à l'information, or your provincial privacy commissioner.

Trip Centre does not make decisions about you based exclusively on automated processing.

12.Children

Trip Centre accounts are intended for adults and for Organizations. Family preparation is designed for parents and guardians and does not require information about a child. We do not knowingly collect personal information from children under 14 without the consent of a parent or guardian. If you believe a child has given us personal information, contact us and we will delete it.

13.Email communications

We send service messages you need to use Trip Centre, such as invitations, password resets and Trip reminders. A demo request lets us follow up about that request only. It does not subscribe you to marketing.

We send marketing email only with your express consent, as required by Canada's Anti-Spam Legislation (CASL). Any opt-in will be separate, optional and unchecked by default, and every marketing message will include a way to unsubscribe.

14.Changes to this policy

We will update this policy as Trip Centre changes. We will post the new version here with a new date, and if a change materially affects how we handle your information, we will tell you by email or in the application before it takes effect.

15.Contact us

Our Privacy Officer is responsible for our compliance with this policy and with Canadian privacy law. Contact them with questions, requests or complaints at support@tripcentre.app, or by mail at 222 Queen Street #1000, Ottawa, ON K1P 5V9.