HHallSelectDraft for review. This text has not been reviewed by a lawyer yet. Items in [square brackets] must be completed before launch.
Privacy policy
Last updated October 12, 2026
HallSelect is operated by [legal business name], [address] (“HallSelect”, “we”). This policy explains what personal information we collect when you use HallSelect, why, and the choices you have. Questions go to [privacy contact email].
What we collect
- Venue authority evidence: venue owners may submit rental rights documents and contact details for private manual review. Evidence is visible only to the submitting owner and authorized reviewers, replaced when resubmitted, and removed when the owner deletes their account.
- Account details: your name and email address, and either a securely hashed password or the identifier Google gives us when you sign in with Google. We never see your Google password.
- Profile: whether you are a hall owner or booking an event, your country, and for owners the business name and services you choose.
- Listings: hall details, prices, availability and photos that owners add.
- Bookings: requests, guest counts, selected extras, the price and terms you agreed to, and status changes.
- Payments: Stripe processes all card payments and venue payouts. We receive payment status, amounts and Stripe reference numbers. We never receive or store card numbers or bank account numbers.
- Hall requests: when you ask for a hall that isn’t bookable yet, the name, email, optional phone number, date, guest count and message you send. You don’t need an account to send one.
- Email records: which kind of email we sent you and whether it was delivered. We do not keep copies of the messages.
- Technical data: your IP address and browser details, used to keep you signed in, to show halls near your approximate city (worked out from your IP address by Cloudflare and not stored), to limit repeated sign-in attempts and to protect the service. We use only the cookies needed to sign you in; we do not use advertising or tracking cookies.
How we use it
To run your account; to show listings and handle booking requests, payments, refunds and payouts; to send emails about your account and bookings; to review listings before they are published; to prevent fraud and abuse; and to meet legal, tax and accounting obligations.
Who we share it with
- The other party to a paid booking. Once a booking is paid, the venue sees the organizer’s name and email, and the organizer sees the venue’s business name and email, so you can arrange the event. Before payment, neither sees the other’s contact details.
- Service providers who process data for us: Cloudflare (hosting, database and photo storage), Stripe (payments and payouts), Resend (email delivery) and Google (only if you choose Google sign-in). They may store data outside Canada, including in the United States.
- Venues you ask about. When you send a hall request, we may contact that venue about your date and guest count. We share your name and contact details with the venue only if you agree when we follow up.
- Authorities where the law requires it.
We do not sell personal information.
How long we keep it
We keep your account until you delete it. Records of paid bookings and payments are kept for as long as tax and accounting law requires (in Canada, generally six years after the end of the tax year they relate to), without your name or email address once your account is deleted.
Hall requests are deleted automatically 12 months after they are sent, or sooner if you ask.
Your choices
You can see and correct most of your information in the app. You can delete your account at any time from Settings → Delete account. To ask for a copy of your information or for help, email [privacy contact email]. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.
Changes
If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.