Privacy Policy

1. Introduction

seats.ca ("we," "us," or "our") is committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our mobile application, or interact with any of our services (collectively, the "Platform"). This policy is designed in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Information We Collect

We collect the following categories of personal information in the course of providing our services:

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Transaction Processing: To process ticket purchases and sales, manage your orders, facilitate electronic ticket delivery, handle membership subscriptions, and communicate transactional updates including order confirmations, delivery notifications, and payment receipts.
• Account Management: To create, maintain, and secure your user account, verify your identity, manage your membership status, and provide personalized features and recommendations based on your preferences and activity.
• Platform Improvement: To analyze usage patterns, diagnose technical issues, optimize site performance, develop new features, conduct internal research and analytics, and improve the overall user experience across the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, troubleshoot technical problems, and provide assistance with your account, orders, or the Platform generally.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, abuse of the Platform, and other potentially harmful or illegal activities. This includes maintaining banned user records based on email addresses, IP addresses, and phone numbers when necessary to protect the integrity of the marketplace.
• Payment Verification & Risk Assessment: We may use payment card evaluation systems and fraud detection tools (provided by Stripe and other risk assessment services) to assess the legitimacy of transactions. These tools may evaluate factors such as card origin, billing address verification, velocity checks, and device fingerprinting. Based on these assessments, we reserve the right to decline a transaction, request an alternative payment method, or require additional verification before processing a purchase. This is done to protect both buyers and sellers from fraudulent activity.
• Profiling & Personalization: We may use your browsing history, purchase history, location data, and preferences to personalize your experience on the Platform, including displaying relevant events, teams, and ticket recommendations. You are not subject to decisions based solely on automated profiling that produce legal or similarly significant effects without human review.
• Marketing Communications: To send you newsletters, promotional offers, event updates, and other marketing content, where you have provided your consent. You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or contacting us directly.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests, and to enforce our Terms of Service, protect our rights, and defend against legal claims.

4. Information Shared with Sellers

When you purchase tickets through seats.ca, certain limited information may be shared with the ticket seller or authorized reseller to facilitate the transaction and deliver your tickets. This may include:

• Your first and last name (as required for ticket transfer or will-call pickup)
• Your email address (for electronic ticket delivery)
• The number of tickets purchased and seat details
• Order confirmation number

We do not share your full billing address, payment card details, phone number, or IP address with sellers. Sellers are contractually prohibited from using buyer information for any purpose other than completing the specific ticket transaction. Misuse of buyer data by a seller may result in immediate removal from the Platform. If you have concerns about how a seller has handled your information, please contact us at [email protected].

5. Seller & Reseller Compliance

Sellers and authorized resellers who list tickets on seats.ca may be required to provide additional personal and business information for identity verification, tax compliance, and regulatory purposes. This may include legal name, business name, tax identification numbers, bank account details for payout processing (handled securely through Stripe Connect or equivalent), and government-issued identification. Resellers are responsible for complying with all applicable tax laws in their jurisdiction, including the collection and remittance of applicable sales taxes. seats.ca does not provide tax advice and is not responsible for a seller's failure to comply with their tax obligations. Seller and reseller data is retained in accordance with applicable legal and financial record-keeping requirements.

6. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who perform services on our behalf, including Stripe (payment processing), email delivery services (transactional and marketing emails), cloud hosting and infrastructure providers, AI service providers (for chat support and content processing), and analytics platforms. These providers are contractually obligated to use your information only for the specific services they provide to us and to maintain appropriate security measures.
• Transaction Counterparties: When you buy or sell tickets, certain limited information is shared between buyer and seller as necessary to complete the transaction and facilitate ticket delivery, as described in Section 4 above.
• Legal Requirements: We may disclose your information when required to do so by law, in response to a valid subpoena, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to an emergency.
• Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of the transaction. We will notify you via email or prominent notice on the Platform before your information becomes subject to a different privacy policy.

7. Data Security

We implement and maintain industry-standard technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to: encryption of data in transit using TLS/SSL protocols, secure cloud infrastructure with access controls, regular security assessments, role-based access controls for internal systems, and row-level security policies on all database tables to ensure users can only access their own data. Payment processing is handled entirely by Stripe, which maintains PCI-DSS Level 1 compliance. Despite our efforts, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of your information.

8. Data Breach Notification

In the event of a data breach involving your personal information that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as soon as feasible, in accordance with PIPEDA's mandatory breach reporting requirements. Notification will include a description of the incident, the types of personal information involved, the steps we have taken or intend to take to reduce the risk of harm, and recommended actions you can take to protect yourself. We maintain an internal breach response plan and conduct regular assessments to identify and mitigate data security risks. We will also maintain a record of all breaches of security safeguards, regardless of whether they meet the notification threshold, as required under PIPEDA.

9. Cookies & Tracking Technologies

We use cookies, local storage, and similar tracking technologies to enhance your browsing experience, maintain your session state, analyze site traffic, and personalize content. The types of cookies and tracking technologies we use include:

• Strictly Necessary Cookies: Required for the Platform to function properly, including authentication tokens, session management, and security-related cookies. These cannot be disabled without affecting core functionality.
• Analytics Cookies: Help us understand how visitors interact with the Platform, including page views, traffic sources, bounce rates, and user flow. We may use third-party analytics services that set their own cookies.
• Preference Cookies: Remember your settings, choices, and preferences (such as language, region, or display options) to provide a more personalized experience.
• Local Storage: We use browser local storage to maintain session state, cache certain data for performance optimization, and store non-sensitive user preferences.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though disabling certain cookies may affect the functionality of the Platform. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Account information is retained for as long as your account remains active. Transaction records are retained for a minimum of seven (7) years to comply with Canadian tax and financial record-keeping requirements. If you request deletion of your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes such as fraud prevention.

11. Third-Party APIs & Services

The Platform integrates with third-party application programming interfaces (APIs) and services to provide certain features and functionality. These integrations may include, but are not limited to:

• Payment Processing: Stripe for secure payment handling, subscription management, and seller payouts.
• AI-Powered Support: Third-party AI language model providers for our live chat and customer support features. Chat messages may be processed by these AI services to generate responses. While we select providers with strong privacy practices, the processing of chat content is subject to those providers' own data handling policies.
• Event Data & Scheduling: Third-party sports data APIs for event schedules, scores, team information, and related content.
• Transportation & Travel: Integration with ride-sharing services (such as Uber) and travel booking platforms for user convenience.
• Email Delivery: Third-party email service providers for transactional notifications and marketing communications.
• Cloud Infrastructure: Cloud hosting, database, and storage providers for Platform operation and data management.

Disclaimer: While we take reasonable steps to select reputable third-party service providers, seats.ca is not responsible for the privacy practices, data handling, security measures, or policies of any third-party API providers or services integrated with the Platform. Data transmitted to or processed by third-party services is subject to those third parties' own terms of service and privacy policies. We encourage you to review those policies independently. seats.ca shall not be held liable for any data loss, unauthorized access, or privacy breach that occurs within a third-party provider's systems or infrastructure.

12. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation, you have the following rights with respect to your personal information:

• Right of Access: You have the right to request access to the personal information we hold about you, subject to limited exceptions under the law.
• Right of Correction: You have the right to request correction of any personal information that is inaccurate, incomplete, or out of date. You can update certain information directly through your account settings.
• Right to Withdraw Consent: You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may limit your ability to use certain features of the Platform.
• Right to Deletion: You may request the deletion of your personal information, and we will comply with your request unless retention is required by law or necessary for legitimate business purposes.
• Right to Information About Automated Decision-Making: You have the right to be informed about any automated decision-making processes that may affect you, including fraud scoring and payment verification systems, and to request human review of any significant decisions made solely through automated means.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by PIPEDA.

13. Children's Privacy

The Platform is not intended for use by individuals under the age of 18 or the age of majority in their province or territory of residence. We do not knowingly collect personal information from children or minors. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete that information promptly. If you believe that a minor has provided us with personal information, please contact us at [email protected].

14. Third-Party Links

The Platform may contain links to third-party websites, services, or applications that are not operated or controlled by seats.ca, including but not limited to payment processors, social media platforms, ride-sharing services, and hotel booking sites. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices, content, or data collection policies. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

15. International Data Transfers

Your personal information may be stored and processed on servers located outside of Canada, including in the United States, where our cloud infrastructure and service providers may operate. When your information is transferred outside of Canada, it may be subject to the laws of the jurisdiction in which it is stored, which may differ from Canadian privacy law. We take reasonable steps to ensure that your information receives an adequate level of protection in the jurisdictions in which it is processed, including through contractual obligations with our service providers that require them to protect your data to standards substantially equivalent to those required under PIPEDA.

16. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, third-party integrations, or business operations. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you by email or through a prominent notice on the Platform. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Privacy Officer at:

We are committed to working with you to resolve any complaints or concerns about your privacy. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or visit www.priv.gc.ca.