Privacy Policy

1. Introduction

Toronto City Guide Hub ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Our company is registered in the Netherlands at the following address:

This policy applies to all information collected through our website and any related services, communications, or events. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our website.

This Privacy Policy is governed by the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Dutch data protection legislation, including the Uitvoeringswet Algemene verordening gegevensbescherming (UAVG).

2. Data Controller

The data controller responsible for your personal data is Toronto City Guide Hub, located at Pearyweg 23, 4462 GT Goes, Nederland. For any questions or requests regarding your personal data, you can contact us at [email protected].

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact information: Your name, email address, and telephone number when you fill out our contact or request forms.
• Enquiry details: The section of interest you select and any comments or messages you include in your form submission.
• Program registration data: Information provided when expressing interest in our educational programs.

3.2 Information Collected Automatically

• Device and browser information: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: Pages visited, time spent on pages, navigation paths, referring URLs, and click patterns.
• Cookie data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy.
• Location data: Approximate geographic location based on your IP address (country and city level only).

3.3 Information from Third Parties

We may receive limited information from third-party analytics services that help us understand how visitors use our website. This data is aggregated and does not typically identify individual users.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a) GDPR): When you submit a contact form, you provide explicit consent for us to process your data for the purpose of responding to your enquiry. You may withdraw your consent at any time.
• Legitimate interest (Article 6(1)(f) GDPR): We process certain data (such as analytics and usage data) based on our legitimate interest in understanding how our website is used, improving our content, and ensuring the security and proper functioning of our website.
• Legal obligation (Article 6(1)(c) GDPR): We may process your data when we are legally required to do so, for example, in response to lawful requests by public authorities or to comply with applicable Dutch or EU law.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Responding to enquiries: To process and respond to your contact form submissions and requests for information about our city guide or educational programs.
• Providing our services: To deliver informational and educational content about Toronto tailored to the interests you have indicated.
• Improving our website: To analyse usage patterns, identify areas for improvement, and enhance the user experience.
• Technical operations: To maintain, protect, and improve the security and functionality of our website.
• Legal compliance: To comply with applicable laws, regulations, and legal processes under Dutch and EU jurisdiction.
• Communication: To send you relevant information regarding your enquiry or educational program registrations, only with your consent.

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytical data. The types of cookies we use include:

6.1 Strictly Necessary Cookies

These cookies are essential for the functioning of our website. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies as they are necessary for the website to operate.

6.2 Analytical Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This data helps us improve our content and user experience.

6.3 Functional Cookies

These cookies enable enhanced functionality and personalisation, such as remembering your preferences and settings.

For detailed information about the specific cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.

When you first visit our website, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies. You can also manage cookies through your browser settings at any time.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers: We may share data with trusted third-party service providers who assist us in operating our website, processing form submissions, or conducting analytics. These providers are contractually obligated to protect your data and may only use it for the specific purposes we have authorised.
• Legal requirements: We may disclose your data if required to do so by Dutch or EU law, or in response to valid requests by public authorities (such as the Autoriteit Persoonsgegevens, a court, or a government agency).
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

We do not transfer your personal data outside the European Economic Area (EEA) unless adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements under Dutch law.

• Contact form submissions: We retain enquiry data for up to 24 months after the date of your last interaction with us, unless you request earlier deletion.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it does not constitute personal data.
• Cookie data: Cookie lifetimes vary depending on the type. Please refer to our Cookie Policy for specific retention periods.

When your data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS certificates (HTTPS).
• Access controls to limit data access to authorised personnel only.
• Regular security assessments and updates to our systems.
• Secure storage of form submissions with access restrictions.
• Spam protection measures on our contact forms.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but will promptly notify you and the relevant supervisory authority in the event of a data breach as required by GDPR Article 33.

10. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR and Dutch data protection law:

• Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restriction of processing (Article 18): You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by the GDPR. If we need more time (up to an additional 60 days), we will notify you of the extension and explain the reason.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Dutch Data Protection Authority:

11. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 years of age. Under Dutch law (UAVG), parental or guardian consent is required for the processing of personal data of children under the age of 16.

If we become aware that we have inadvertently collected personal data from a child under 16 without appropriate consent, we will take steps to delete that data as soon as possible. If you believe we may have collected data from a child under 16, please contact us at [email protected].

12. Third-Party Links

Our website may contain references to external websites, services, or resources. This Privacy Policy applies only to the website operated by Toronto City Guide Hub. We are not responsible for the privacy practices, content, or policies of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal data.

13. International Data Transfers

Our company is based in the Netherlands, within the European Economic Area (EEA). We process and store your personal data primarily within the EEA.

If any data processing requires the transfer of personal data outside the EEA, we will ensure that appropriate safeguards are in place in accordance with GDPR Chapter V, including:

• Transfers to countries with an adequacy decision by the European Commission.
• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Other legally recognised transfer mechanisms.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes to this policy, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of such changes.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Netherlands and applicable European Union regulations, including the GDPR. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in the Netherlands.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please do not hesitate to contact us:

We will endeavour to respond to all privacy-related enquiries within 30 days of receipt.