Privacy

When you ask to book a room we collect the name, phone number and email address you type, what the event is for, how many people you expect, and any note you add. Nothing else. You do not create an account and we never ask for a password.

When someone signs in to run a centre, we hold their email address and the sign in codes we send them.

We keep a one way scrambled version of the network address a booking request came from, purely to stop one person flooding a centre with requests. The address itself is never stored and cannot be worked back out. Those records are deleted after two days.

Only the centre you asked to book. Every centre is walled off from every other centre at the database level. The public availability calendar shows busy time as “unavailable” and never shows anybody’s name, phone number or what their event is for.

• Bookings that went ahead: your contact details are removed 12 months after the booking date. The room, date and price stay in the centre’s own records.
• Requests that were declined, cancelled or never answered: contact details are removed after 3 months.
• Sign in codes: deleted within a day. Sign in sessions last 30 days.
• Anti flooding records: deleted after two days.

A centre can also remove someone’s details from a booking straight away, on request.

We take an encrypted copy of the database once a day so nothing is lost if something breaks. Copies are kept for 90 days and then destroyed. This means details you asked us to remove can survive inside a backup copy for up to 90 more days before they are gone for good.

Our servers and database are hosted in the United States. That means your information is stored and processed there, and may be accessible to United States authorities under their laws.

We use Resend to deliver email, Railway to run the service, Cloudflare to hold room photos, and Sentry to record technical errors. They handle it only to provide those services to us.

We never sell it, and we do not use it for advertising.

Every booking email contains a link to your own booking, where you can check it and cancel it. To see, correct or remove anything else, contact the centre you booked with, or write to us at privacy@noorgardens.ca. We answer within 30 days. If you are not satisfied you can complain to the Office of the Privacy Commissioner of Canada.