Privacy Policy
Last updated October 16, 2026
What we collect, why, and your rights under Canadian privacy law (PIPEDA and Alberta PIPA).
What we collect
Guests: first name, stay dates and unit, Airbnb confirmation code, optionally the last four digits of a phone number, the name you sign with, an email address if you ask us to email you a receipt, items reserved, and the time you agreed to terms.
Hosts: account email, business details, property information, unit calendar links, tax number, staff contact details and order history.
Technical: IP address (used to block code guessing), browser type and basic logs.
Why we use it
To match you to your stay, process reservations, calculate taxes, let hosts fulfil orders, send service messages you would expect, prevent fraud and comply with law. We do not sell personal information.
Who we share it with
Your host (for reservations at their property), and service providers who host our app, database, email and text messaging, under contracts requiring protection of the data. Some providers may store data outside Canada, including in the United States, where it may be accessible to authorities under local law.
Calendar data
When a host connects an Airbnb calendar, we import reservation dates, confirmation codes and phone-number last-four digits that Airbnb includes in the calendar feed, only to verify guests.
Retention
Stay and order records are kept for 7 years for tax and accounting purposes, then deleted or anonymised. Lookup-attempt logs are kept for up to 30 days.
Security
Data is encrypted in transit, access is restricted by account, and guest access uses unguessable links and rate-limited code lookups.
Your rights
You may request access to or correction of your personal information, or withdraw consent where applicable, by contacting support@yourwaypost.ca. We respond within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
Breaches
If a breach creates a real risk of significant harm, we will notify affected people and the regulator as required by law.
