Privacy Policy
Last updated: February 5, 2026
1. Introduction
GroupDeck ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cruise group management platform (the "Service").
We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.
2. Information We Collect
We collect information that you provide directly to us, including:
- Account Information: Name, email address, company name, and password when you register.
- Passenger Data: Names, passport numbers, dates of birth, nationalities, and other travel document information that you input for cruise manifests.
- Payment Information: Billing details and payment tracking data for your groups (we do not store credit card numbers directly).
- Usage Data: Information about how you use the Service, including log data and analytics.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Generate cruise manifests and travel documents
- Process and track payments for your groups
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and customer service requests
- Comply with legal obligations
4. Data Security
We implement industry-standard security measures to protect your personal information:
- All data is encrypted in transit using TLS/SSL
- Data at rest is encrypted using AES-256 encryption
- Access to personal data is restricted to authorized personnel only
- Regular security audits and monitoring are performed
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- With your consent or at your direction
- With service providers who assist in operating our platform
- To comply with legal obligations or respond to lawful requests
- To protect the rights, property, or safety of GroupDeck, our users, or others
6. Your Rights Under PIPEDA
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access your personal information held by us
- Request correction of inaccurate information
- Withdraw consent to the collection, use, or disclosure of your information
- File a complaint with the Privacy Commissioner of Canada
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
9. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Email: hello@groupdeck.co
Location: Winnipeg, Manitoba, Canada