Privacy Policy

We take your privacy seriously. Here's how we handle your information and what rights you've got.

Last Updated

November 4, 2025

Download PDF
PIPEDA Compliant

We're fully compliant with Canada's Personal Information Protection and Electronic Documents Act. Your data stays protected under Canadian law, and we're not messing around with that responsibility.

International Standards

Even though we're based in Toronto, we respect GDPR principles for our international guests. Everyone deserves the same level of privacy protection, no matter where they're from.

Look, nobody actually enjoys reading privacy policies. We get it. But since you're staying with us at the Ignivarion Forge Hotel, we figured you'd wanna know what happens with your info. We've tried to keep the legalese to a minimum and just tell it straight.

This policy covers everything from when you book a room to when you're sipping craft cocktails at the Forge Bar. If you've got questions after reading this, just give us a shout at reservations@ignivarionforge.info.

Right off the bat, let's talk about what we're actually collecting. We're not here to snoop, but running a hotel means we need certain details to make your stay work.

Personal Identifiers
  • Your name, email, phone number - the basics for booking and keeping in touch
  • Mailing address and billing info when you're paying for your stay
  • Government-issued ID details (we're legally required to collect this stuff)
  • Passport info for our international visitors
Booking & Stay Details
  • Check-in and check-out dates, room preferences, number of guests
  • Special requests like dietary restrictions or accessibility needs
  • Payment card details (though we don't actually store the full number)
  • Your history with us if you've stayed before
Technical Stuff
  • IP addresses and device info when you visit our website
  • Cookies and similar tracking tech (more on that below)
  • Wi-Fi usage logs while you're connected on our property

We're not gonna sell your email to random marketing companies or anything shady like that. Here's what we actually do with your info:

Running the Hotel

First and foremost, we use your details to manage your reservation, check you in, provide room service, handle billing - you know, the actual hotel stuff. Can't really run the place without this.

Making Your Stay Better

We remember your preferences so next time you don't have to tell us you're allergic to feather pillows or that you prefer a room away from the elevator. We're also using this to recommend experiences you might actually enjoy based on what other guests have liked.

Keeping You in the Loop

We'll send booking confirmations, pre-arrival info, and updates about your stay. If you've opted in, we might also send newsletters about what's happening at the hotel - new menu items at the Artisan Restaurant, upcoming events in our heritage spaces, that kind of thing.

Legal Requirements

Sometimes we're required by law to keep certain records or report specific information. We're not thrilled about it either, but that's the regulatory world we live in.

We're pretty protective of your information, but running a modern hotel means working with some third parties. Here's the honest breakdown:

Payment Processors

When you pay with a credit card, that transaction goes through secure payment gateways. They handle the sensitive financial stuff so we don't have to store it ourselves. These companies are bound by even stricter regulations than we are.

Service Partners

Our booking system, email service, customer relationship management tools - these are handled by trusted tech companies. They only get access to what they need to provide their service, and they're contractually obligated to keep it secure.

Travel Platforms

If you booked through a third-party site, they've already got your info. We receive what we need to honor your reservation, but they maintain their own records under their privacy policy.

Government & Legal

If law enforcement shows up with a proper warrant or we're legally required to disclose information, we're gonna comply. We'll fight overly broad requests, but we're not above the law.

Important: We do NOT sell your personal information to advertisers or data brokers. Period. That's not our business model and never will be.

Yeah, we use cookies. Not the chocolate chip kind, unfortunately. These are small files that help our website work better and remember your preferences.

Essential Cookies

These keep the site functioning - maintaining your session while you browse, remembering items in your cart during booking, that kind of thing. We can't really turn these off without breaking the website.

Preference Cookies

These remember your choices like language settings or whether you've dismissed certain pop-ups. Makes your experience smoother on repeat visits.

Analytics Cookies

We use these to understand how people use our site - which pages are popular, where folks are getting stuck, how long they're staying. It's all anonymized data that helps us improve the experience.

You can control cookie settings in your browser, though blocking everything might make the site act weird. Most browsers let you pick and choose what you're comfortable with.

Under PIPEDA and similar privacy laws, you've got real rights when it comes to your personal info. Here's what you can actually do:

Access Your Data

You can request a copy of what we've got on file about you. We'll provide it in a readable format within 30 days. There might be a small fee if the request is particularly complex, but we'll let you know upfront.

Correct Mistakes

If something's wrong - we've got your old address, misspelled your name, whatever - just let us know and we'll fix it. You can update most stuff directly through your booking account too.

Delete Your Information

You can ask us to delete your data, and we'll do it unless we're legally required to keep it (like tax records or if there's an ongoing dispute). Some stuff has to stick around for legitimate business reasons, but we'll explain what and why.

Opt Out of Marketing

Every promotional email has an unsubscribe link. Click it and you're done. We'll still send transactional emails about your bookings, but the marketing stuff stops immediately.

Withdraw Consent

If you previously agreed to something - like letting us use your photo from an event - you can change your mind. Just reach out and we'll update your preferences.

To Exercise Your Rights: Email us at reservations@ignivarionforge.info with "Privacy Request" in the subject line, or call (416) 555-0147 and ask for our privacy officer.

We take security seriously, especially given our location in a historic building. The forge might be old-school, but our digital security definitely isn't.

Technical Safeguards
  • 256-bit SSL encryption for all online transactions and data transfers
  • Secure servers with regular security audits and penetration testing
  • Encrypted databases with access controls and activity logging
  • Regular backups stored in secure, geographically separate locations
Physical Security
  • Restricted access to areas where physical records are stored
  • Surveillance systems monitoring sensitive areas
  • Secure disposal procedures for documents containing personal info
Staff Training

Everyone who works here gets regular privacy and security training. They only access the information they need to do their jobs, and they know what'll happen if they misuse it.

That said, no system is 100% foolproof. If there's ever a breach that affects your data, we'll notify you as required by law and tell you what steps we're taking to fix it.

We don't keep your information forever. Here's generally how long we hold onto different types of data:

Booking & Stay Records

We keep reservation details and billing information for 7 years to comply with tax laws and accounting requirements. After that, it gets securely deleted unless there's an ongoing legal matter.

Marketing Preferences

If you've signed up for our newsletter but haven't opened an email in 3 years and haven't stayed with us, we'll probably remove you from the list. We'll send a reminder first asking if you still wanna hear from us.

Security Footage

CCTV recordings are typically kept for 30 days unless there's an incident that requires longer retention.

Website Analytics

Anonymized usage data might stick around longer since it can't identify you personally, but we review and purge old analytics regularly.

We don't knowingly collect personal information from kids under 13 without parental consent. If you're booking a family stay that includes children, we'll collect their info through the adult making the reservation.

If we discover we've accidentally collected data from a child without proper consent, we'll delete it as soon as possible. Parents can request access to, correction of, or deletion of their child's information by contacting us.

For our guided historical tours and events, we sometimes take group photos. We always get explicit permission from parents before including minors in any promotional materials.

Most of your data stays in Canada, but some of our service providers operate globally. When we transfer information outside Canada, we make sure it's protected by:

  • Contractual agreements requiring the same level of protection as Canadian law
  • Using providers that comply with recognized international privacy frameworks
  • Implementing technical safeguards like encryption during transfers

If you're an international guest, your data might be processed both in your home country and in Canada. We'll respect the privacy laws of both jurisdictions where applicable.

For EU Residents: Even though we're Canadian, we respect GDPR principles. You have the right to lodge a complaint with your local data protection authority if you're not happy with how we've handled your information.

Laws change, technology evolves, and sometimes we need to update how we handle things. When we make significant changes to this privacy policy, we'll let you know by:

  • Posting the updated policy on our website with a new "last updated" date
  • Sending an email to guests with upcoming reservations
  • Displaying a notice on our homepage for at least 30 days

Minor tweaks - like fixing typos or clarifying existing practices - we'll just update the policy without making a big deal about it. But anything that materially affects your rights, you'll hear about it.

If you don't agree with the changes, you can cancel future reservations without penalty or request deletion of your information (subject to legal retention requirements).

If you've got questions, concerns, or complaints about how we're handling your personal information, we wanna hear about it. Seriously.

Reach Out to Us

Email: reservations@ignivarionforge.info (put "Privacy" in the subject line)

Phone: (416) 555-0147 (ask for our privacy officer)

Mail: Privacy Officer
Ignivarion Forge Hotel
285 King Street East
Toronto, ON M5A 1K2
Canada

We'll respond to most inquiries within 5 business days. If it's something complex that needs investigation, we'll at least acknowledge receipt and give you a timeline for when you can expect a full response.

File a Complaint

If you're not satisfied with how we've addressed your concern, you can file a complaint with:

Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Toll-free: 1-800-282-1376

The Bottom Line

Look, we know privacy policies are boring, but they matter. We've built the Ignivarion Forge Hotel on the foundations of historic craftsmanship and trust - the same values that guide how we handle your personal information.

We collect what we need, protect it seriously, use it fairly, and respect your rights. If we ever fall short of that, we want you to tell us. This isn't just legal compliance for us - it's about treating you the way we'd wanna be treated.

Thanks for taking the time to read this. Now go book a room and experience what we're really about.