Privacy Policy

(Compliant with PIPEDA, GDPR, CCPA/CPRA)

1. Who we are

Newfoundland Cabins is a small, family-run collection of coastal cabins in Newfoundland, Canada. Our website is https://newfoundlandcabins.com You can reach us any time at info@newfoundlandcabins.com

2. What personal information we collect and why

When you…	We collect	Why we need it	Legal basis (GDPR)
Browse the site	Almost nothing. Only anonymized analytics (no cookies, no IP stored)	Understand how the site is used, keep it fast and safe	Legitimate interest
Fill the waitlist or inquiry form	Name (as you give it), email, preferred dates, your note	Reply to you and hold your place when dates open	Consent
Make a booking	Name, email, phone, address, payment details	Fulfil your reservation and send confirmation	Contract
Pay a deposit or balance	Card data (processed by Stripe – we never see full card numbers)	Take secure payment	Contract
Stay with us	License-plate (for parking), dietary notes if you order meals	Make your stay smooth and safe	Legitimate interest

3. Who we share your data with

Freetobook – our booking system (UK/EU servers, GDPR-compliant)
Stripe – payment processor (PCI-DSS, never stores full card on our systems)
Microsoft 365 – our private email (Canada/EU data centres)
Fathom Analytics – anonymized, cookie-free analytics (Canada)

We never sell, rent, or share your data with marketers or anyone else.

4. How long we keep your data

Waitlist/inquiry: 36 months (so we can reach you when your dates open)
Booking & payment records: 7 years (Canadian tax law)
Everything else is deleted as soon as it’s no longer needed.

5. Where your data lives

Canada and the European Union only. Never the United States (except anonymized analytics).

6. Your rights (you always have these)

See every piece of data we hold about you
Correct it
Delete it (except what tax law forces us to keep)
Withdraw consent for marketing (we send almost none)
Take your data with you (we’ll send a CSV within 14 days)

Just email info@newfoundlandcabins.com – we answer personally, usually the same day.

7. Security

All connections are encrypted with TLS 1.3. Payments go straight to Stripe’s PCI-DSS Level 1 systems – we never touch full card numbers. We run a tiny team and review access logs ourselves.

8. Children

Our site and cabins are not aimed at anyone under 18. We do not knowingly collect data from children.

9. Changes to this policy

If we ever make a big change, we’ll email everyone who has ever booked or joined the waitlist and post the new version here.

10. Contact & complaints

Data controller: APB Holdings Ltd. – info@newfoundlandcabins.com

Mailing address: 9608 – 51 Avenue, Edmonton, AB T6E 5A6 Canada

If you feel we’ve let you down, you can contact the Office of the Privacy Commissioner of Canada or your EU/UK supervisory authority.

Last updated: 1 December 2025