Privacy Policy

Effective Date: []

Purpose. This Privacy Policy explains how Black Opal Concierge Services Inc. (“Black Opal”, “we”, “us”) collects, uses, discloses, and protects personal information in Canada, including under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). It applies to our website, app, and concierge services (the “Services”).

We collect information that you provide directly and that we obtain during service delivery, such as:

• Identity & contact: name, email, phone, address, date of birth (where required for age‑restricted services or guest lists).
• Account & membership: tier, preferences, communications, request history.
• Travel & event details: itineraries, reservation details, guest names, seating or access preferences, ID numbers where required by venues/providers.
• Payment information: tokenized card details via our payment processor; we do not store full card numbers.
• Device & usage: IP address, device/browser data, app telemetry, cookies/analytics settings.
• Sensitive info by request: where necessary for specific bookings (e.g., accessibility, dietary needs), collected and used only to deliver that request.

We collect information from you, your authorized contacts, public sources (e.g., event/venue rules), and third‑party suppliers involved in fulfilling your requests.

We use information to:

• Provide and manage the Services (identity verification, account creation, membership billing, concierge requests).
• Arrange bookings and purchases with Suppliers on your behalf; manage communications and approvals for guest lists and venue access.
• Process payments and prevent fraud.
• Provide customer support and maintain service records.
• Send service notices (e.g., renewal reminders); send marketing communications with your consent.
• Operate, maintain, and improve our website/app (including analytics and debugging).
• Comply with legal obligations and enforce our Terms.

We collect, use, and disclose personal information with your consent or as otherwise permitted by law. Express consent includes when you sign up, request a booking, or opt‑in to marketing (email/SMS/WhatsApp). Implied consent applies where the information is reasonably necessary to fulfill your request. You may withdraw consent at any time (subject to legal or contractual restrictions and reasonable notice). Withdrawing consent may impact our ability to provide certain Services.

We may disclose personal information to:

• Suppliers (e.g., hotels, restaurants, event organizers, ticketing agencies, travel providers, retailers) to fulfill your requests and manage approvals/guest lists.
• Payment processors for membership fees and approved purchases.
• Service providers (e.g., hosting, IT, communications, analytics, customer support) who process information on our behalf under contractual safeguards.
• Affiliates (as defined in the Terms) where needed to deliver services.
• Authorities where required by law or to protect rights, safety, and security.
• Business transactions (e.g., merger, acquisition) subject to appropriate protections.

We do not sell personal information.

Some service providers and Suppliers may be located outside Canada (e.g., the United States). Personal information stored or processed outside Canada may be subject to the laws of that jurisdiction and accessible to courts, law enforcement, and national security authorities. We use contractual and organizational measures to protect information transferred internationally.

We use necessary cookies for site functionality and, with your consent, analytics cookies (e.g., to understand site usage). You can manage preferences through our cookie banner or browser settings. If you disable cookies, some features may not work as intended.

We send marketing emails/SMS/WhatsApp only with your consent and include straightforward unsubscribe mechanisms. You can opt out at any time via the link in our emails or by contacting us.

We retain personal information for as long as necessary to provide the Services, for legitimate business purposes (e.g., records, fraud prevention), and to comply with legal obligations. When no longer needed, we securely delete or anonymize information.

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information (e.g., access controls, encryption in transit, staff training). No security measures are perfect; we encourage you to use strong, unique passwords and keep them confidential.

Subject to legal limits, you may request access to and correction of your personal information in our custody or control. You may also inquire about our practices, including how information is collected, used, disclosed, and safeguarded.

Our Services are intended for individuals 18+. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete it.

For questions, requests, or complaints about privacy:
Black Opal Concierge Services Inc.
Email: [privacy@blackopal.ca] (confirm)
Phone: +1 (587) 894‑1370
Postal Mail: [Insert mailing address]

You may also contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada regarding concerns about our practices.

We may update this Policy from time to time. If material changes are made, we will provide prominent notice (e.g., website notice or email). The “Effective Date” above reflects the latest version.