Privacy Policy

1. Commitment to Personal Data Protection

Two Seas Hospitality Ltd. (“Two Seas Hotel”, “we”, “our”, or “us”) respects your privacy and is dedicated to safeguarding the personal information you provide when using twoseashotel.com or visiting our property. This policy outlines our collection, use, and disclosure practices under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

2. Information We Collect

We collect personal information necessary to deliver exceptional hospitality and reservation services:

• Contact Data: Full name, billing and residential addresses, telephone numbers, and email addresses.
• Reservation & Stay Data: Check-in and check-out dates, suite preferences, room keys, vehicle license plate for parking, and guest identification details required by local lodging regulations.
• Health & Dietary Preferences: Dietary restrictions, allergies, and wellness preferences disclosed voluntarily for dining and hydrotherapy services.
• Payment Details: Encrypted credit card details processed directly by certified PCI-DSS Level 1 compliant financial payment gateways (we do not store raw card numbers on our local servers).

3. Purpose of Collection & Legal Basis

Your personal information is collected and processed strictly to:

• Confirm, manage, and execute room reservations and resort experiences;
• Provide tailored concierge services, dining reservations, and wilderness excursions;
• Process billing and issue tax receipts in compliance with Canadian Revenue Agency (CRA) guidelines;
• Maintain guest security, prevent fraud, and adhere to provincial health and safety standards.

4. Disclosure to Third Parties

We do not sell, rent, or lease guest information to third parties under any circumstances. Information is only shared with verified service providers (e.g., cloud booking engines, payment processors, excursion operators) under strict non-disclosure obligations, or when required by Canadian law enforcement or court order.

5. Data Retention & Security Safeguards

We implement rigorous physical, technical, and administrative controls (including TLS 1.3 encryption, role-based access restrictions, and regular security audits) to prevent unauthorized access or disclosure. Data is retained only as long as necessary to fulfill business purposes or satisfy statutory audit requirements.

6. Your Privacy Rights

Under Canadian privacy statutes, you have the right to request access to your personal information, request corrections, or withdraw consent to non-essential communications at any time. To exercise these rights, please contact our Privacy Officer at [email protected] or via mail at our registered address.