Legal Document

Privacy Policy

Last updated: May 30, 2026 · Compliant with Loi 25 (Quebec) and PIPEDA (Canada)

The Bond Social Club (the "Club", "we" or "us") is committed to protecting the privacy of its members and users to the highest ethical and legal standard. This Privacy Policy transparently describes what personal data we collect, for what purpose, who has access to it and what your rights are as the data subject.

This policy is governed by Loi 25 — Loi modernisant des dispositions législatives en matière de protection des renseignements personnels (L.Q. 2021, c. 25) of Quebec — and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Data Controller

The Bond Social Club
Quebec, Canada
Privacy contact: privacy@thebondsocialclub.com

In accordance with Loi 25 and PIPEDA, the Club has designated a Privacy Officer. You may contact this person for any enquiry, correction or exercise of your rights at the address above.

2. Personal Data We Collect

We collect only the data strictly necessary to manage memberships, event bookings and Club communications:

  • Full name — for the personal identification of each ticket and management of venue access lists.
  • Email address — to send purchase confirmations, event reminders, administrative communications, and, with your explicit consent, newsletters about upcoming experiences.
  • Account access data — if user accounts are implemented, encrypted authentication credentials (email + hashed password).
  • Transaction data — transaction reference, amount and date, processed through Stripe. The Bond Social Club does not store any payment card data.
  • Platform usage data — non-personally identifiable technical information (browser type, country of access, pages visited) collected via privacy-respecting analytics tools.

We do not collect sensitive personal data (ethnic origin, health, political or religious opinions, sexual orientation) and do not request it in any form.

3. Purpose of Processing

Your personal data is used exclusively for the following purposes:

  • Managing event reservations and confirming venue access.
  • Sending transactional communications: purchase confirmation, event reminder, access instructions.
  • Complying with legal and tax obligations applicable in Quebec and Canada.
  • Improving user experience on the web platform through aggregated, non-individually identifiable usage analysis.
  • Sending communications about upcoming Club events, only with your prior, explicit and informed consent, revocable at any time.

4. Trusted Technology Service Providers

  • Stripe Inc. — Secure payment processing. PCI DSS Level 1 certified. Your financial data is processed and stored entirely by Stripe; the Club does not access or store payment data.
  • Contentful GmbH — Content management platform (CMS). Website content is managed through Contentful. No member personal data is stored in this system.
  • Transactional email provider — Used exclusively to send operational emails (confirmations, reminders). Your email address is never shared with advertising networks or external lists.
  • Vercel Inc. — Web platform hosting. Vercel may log technical access data (IP, browser) for security and availability purposes under its own privacy policy.

All providers act as data processors under the Club's instructions and are contractually bound to process your data solely for the agreed purpose and to maintain appropriate security measures.

5. No Sale or Sharing of Data

The Bond Social Club does not sell, rent, assign or share your personal data with third parties for commercial, advertising or any other purpose outside those described in this policy. Your data is treated with strict confidentiality. The sole exception would be compliance with a legal obligation imposed by a competent authority in Quebec or Canada (e.g. a court order), in which case the Club will notify you to the extent permitted by law.

6. Data Retention

  • Transaction and event registration data: 7 years, in compliance with Quebec's fiscal and accounting obligations.
  • Contact data for marketing communications: until you revoke your consent.
  • User account data: until deletion is requested or after 3 years of inactivity.

7. Data Security

The Club implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure, including TLS/HTTPS encryption, role-based access controls and regular provider assessments. In the event of a security breach affecting your personal data, the Club will notify the Commission d'accès à l'information (CAI) of Quebec and affected individuals within the timelines established by Loi 25.

8. Your Rights

Under Loi 25 and PIPEDA, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data the Club holds about you.
  • Right of rectification — request correction of inaccurate or incomplete data.
  • Right of erasure — request deletion of your data when no longer necessary for the stated purposes, unless a legal retention obligation applies.
  • Right to withdraw consent — withdraw consent for marketing communications at any time without affecting prior processing.
  • Right to portability — request delivery of your data in a structured, commonly used format.
  • Right to object — object to processing in certain circumstances provided by law.

To exercise any of these rights, contact our Privacy Officer at privacy@thebondsocialclub.com. We will respond within 30 days as required by Loi 25. If you believe our data practices are not compliant, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI): www.cai.gouv.qc.ca

9. Cookies

The platform may use strictly necessary technical cookies for site operation (e.g. Stripe payment session cookies). We do not use third-party advertising or retargeting cookies. Analytics tools are configured with privacy protections (no cross-site tracking, anonymized IP).

10. International Data Transfers

Some providers (Stripe, Contentful, Vercel) may store or process data on servers outside Quebec or Canada. All such transfers are conducted under appropriate contractual safeguards and in compliance with Loi 25 and PIPEDA requirements for cross-border transfers of personal data.

11. Changes to this Policy

The Bond Social Club reserves the right to update this Privacy Policy at any time. Changes will be published on this page with the corresponding update date. We recommend checking this policy periodically.

12. Contact

Privacy Officer — The Bond Social Club
privacy@thebondsocialclub.com
Quebec, Canada