1. Administrator and contact
Cardtableeventhire Events Ltd., operating the Cardtableeventhire website, is responsible for the personal information it chooses to collect and use in connection with website enquiries and event-rental administration. The business contact address is 2140 11 Street SE, Calgary, AB T2G 3G8, Canada. Questions about this policy or privacy requests can be directed to info@cardtableeventhire.com.
This policy is intended to describe the website in clear terms. It is not intended to waive rights that individuals may have under applicable privacy legislation.
2. Scope of this policy
This policy applies to personal information handled through cardtableeventhire.com and to information you provide when asking about event-rental services, requesting a quote, discussing venue requirements or arranging a confirmed rental.
The policy does not govern information processing by unrelated websites that a visitor may access independently.
3. Information we may collect
3.1 Information you choose to provide
A rental enquiry may include your name, business or organization name where relevant, email address, phone number, event date, event location, estimated guest count, rental interests, venue access details and the content of your message. We ask for information that helps us understand the event and prepare or administer a rental.
3.2 Technical information
When you visit the website, limited connection and device information may be processed for security, reliability and basic website operation. This may include request time, requested page, browser information and IP-related connection data. We do not use this information to create advertising profiles.
3.3 Information we do not intentionally request
Do not submit highly sensitive or unrelated information through an event-rental enquiry. The service does not need information beyond what is reasonably required to plan and administer an event equipment rental.
4. Purposes and legal bases
Information provided in connection with an enquiry or rental may be used to respond to the request, assess equipment availability, prepare a quote, plan delivery and setup, administer a confirmed rental, communicate about changes, maintain business records, handle disputes and protect the security of the website and business systems.
Where the GDPR applies, processing may rely on steps requested before entering into a contract, performance of a contract, compliance with legal obligations, legitimate interests that do not override individual rights, or consent where consent is the appropriate basis. We do not treat silence or inactivity as consent where express consent is legally required.
We apply purpose limitation and data minimization: information should be used for the purpose explained at collection and limited to what is reasonably necessary for that purpose.
5. Canadian and Alberta privacy framework
Cardtableeventhire operates from Alberta. Alberta’s Personal Information Protection Act (PIPA) is the province’s private-sector privacy law and can apply to provincially regulated organizations. Federal privacy rules may also apply in circumstances governed by federal law or to interprovincial and international commercial activities. We handle personal information in accordance with the privacy requirements that apply to the relevant activity and jurisdiction.
Core practices include accountable handling of personal information, reasonable purposes, appropriate notice, consent where required, safeguards, access and correction rights, and retention only for as long as reasonably needed.
6. Rights where the GDPR applies
If the GDPR applies to the processing of your personal data, you may have rights including access to your data, correction of inaccurate data, deletion in applicable circumstances, restriction of processing, data portability, objection to certain processing, withdrawal of consent where processing is based on consent, and rights relating to solely automated decisions that produce legal or similarly significant effects.
You may also have the right to lodge a complaint with a competent supervisory authority. These rights are subject to legal conditions and exceptions. A request can be sent to info@cardtableeventhire.com. We may need information sufficient to verify identity before disclosing or changing personal data.
6.1 Transparency principles
Where the GDPR applies, we aim to process personal data lawfully, fairly and transparently, for specified purposes, using only data that is necessary, keeping it accurate, retaining it no longer than needed, and protecting it with appropriate technical and organizational measures.
7. Retention
Information should not be kept indefinitely without a business or legal reason. Enquiry information that does not lead to a booking may be retained for a limited period to answer follow-up questions and maintain basic correspondence records, then deleted or anonymized when no longer needed. Information connected with a confirmed rental may be retained longer where required for accounting, contract administration, record keeping, legal claims or other legitimate obligations.
Retention periods are based on the purpose of the information, legal or accounting obligations, the need to maintain appropriate business records and any applicable limitation periods.
8. Security
We use reasonable administrative, technical and physical safeguards in proportion to the nature of the information and the risks involved. Measures may include limiting access, maintaining secure systems, applying updates, using appropriate authentication, protecting backups and deleting information securely when retention is no longer justified.
No internet transmission or storage system can be guaranteed to be completely secure. If a privacy or security incident creates a legal notification obligation, we will follow the applicable requirements for notifying affected individuals or regulators.
9. Service providers and cross-border processing
We may use service providers for functions such as hosting, business communications, customer administration or secure data storage. Where a provider processes personal information on our behalf, we limit the information shared to what is reasonably necessary and use appropriate contractual, organizational and security safeguards.
Where the GDPR applies to an international transfer of personal data, an appropriate transfer mechanism and any required supplementary safeguards should be used.
11. Children
The website is directed to people arranging events and is not designed to collect personal information from children. If we learn that personal information from a child has been handled in circumstances requiring parental authorization or deletion under applicable law, we will take appropriate steps to address the issue.
12. Policy updates and contact
We may update this policy when our services, legal obligations or personal-information practices change. When a material update is made, we will revise the effective date and publish the current version on this page.
Privacy questions and rights requests: info@cardtableeventhire.com. Business address: 2140 11 Street SE, Calgary, AB T2G 3G8, Canada.
13. Recipients and disclosure
We disclose personal information only where there is a legitimate and lawful reason connected with an event rental, business administration, legal compliance or service delivery. Recipients may include staff or contractors who need the information to answer an enquiry, coordinate delivery, maintain business systems, provide professional advice or comply with a lawful request.
We do not sell personal information as a product. If a new category of recipient materially changes how personal information is handled, we will update the privacy information as required by applicable law.
14. Automated decision-making and profiling
We do not use solely automated decision-making to approve or reject rental enquiries, set individualized terms, or make decisions that produce legal or similarly significant effects. If this practice changes, we will provide any transparency, safeguards and rights information required by applicable law.
15. Questions, complaints and supervisory authorities
Individuals may contact the business at info@cardtableeventhire.com with a privacy question or concern. Where applicable, individuals may also have the right to raise a complaint with the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or a competent European data protection authority, depending on the law and processing activity involved.
Nothing in this policy is intended to prevent a person from exercising a complaint or appeal right provided by applicable law.