Last updated: December 17, 2025

This Privacy Policy describes how Hidden InSite Inc. (“The Haunted Walk,” “we,” “us,” or “our”) collects, uses, and discloses your information when you use our website and services.

1. Information We Collect

Personal Information You Provide

When you book a tour, create an account, or contact us, we may collect:

• Contact Information: Name, email address, phone number

• Billing Information: Address, postal code, city, province/state

• Booking Details: Tour selections, dates, number of guests, special requests

• Payment Information: Payment card details (processed securely through our payment processors)

• Gift Card Information: Purchaser and recipient details for gift card orders

• Account Information: Username, password, booking history, and preferences

Information Collected Automatically

When you visit our website, we automatically collect:

• Usage Data: IP address, browser type and version, pages visited, time and date of visits, time spent on pages, referring website

• Device Information: Device type, operating system, unique device identifiers

• Location Data: General location based on IP address

• Cookie Data: Information stored through cookies and similar technologies (see Section 4)

Recruitment and Employment Information

When you express interest in working with us or apply for a position through hauntedwalk.com, we may collect personal information, including:

• Contact Information: name, email address, phone number

• Eligibility Information: confirmation that you are legally permitted to work in Canada

• Background Information: education, work history, and any information you choose to submit in your application

• Hiring Process Information: communications, scheduling details, and notes related to the recruitment process

We may use simple rule-based form logic (conditional questions and automated responses) to respond more quickly to candidates. We do not use AI tools to assess, rank, or select candidates unless we explicitly disclose that in a job posting.

2. How We Use Your Information

We use your information for the following purposes:

• Providing Services: Processing bookings, managing reservations, facilitating tours, and providing customer support

• Payment Processing: Completing transactions through Moneris (online) and in-person payment terminals

• Communications: Sending booking confirmations, tour updates, reminders, and responding to inquiries

• Marketing: Sending newsletters, special offers, and promotional content about our tours and events (you can opt out anytime)

• Automated Marketing: Sending abandoned cart reminders, post-tour follow-up emails, and personalized recommendations

• Website Improvement: Analyzing usage patterns through Google Analytics to improve our website and services

• Legal Compliance: Meeting legal obligations, resolving disputes, and enforcing our agreements

• Business Operations: Coordinating with tour guides and team members to deliver services

• Recruitment: Managing our recruitment process, communicating with candidates, evaluating applications, scheduling hiring steps, and maintaining a candidate pool for current or future opportunities

3. How We Share Your Information

We do not sell your personal information to third parties.

Service Providers

We share information with trusted third-party service providers who help us operate our business, including but not limited to:

• Xola: Our booking and tour management platform

• Moneris: Payment processing for online and in-person transactions (we do not store your full credit card information)

• Google Analytics: Website analytics and performance tracking

• Campaigner: Email marketing and newsletter distribution

• Social Media Platforms: Facebook, Instagram, Twitter, and other platforms for marketing and customer engagement (through pixels and tracking technologies)

These providers are contractually required to protect your information and use it only for the services they provide to us. We may update or change our service providers from time to time. When we make material changes to the providers that handle personal information, we will update this Privacy Policy or our related notices as appropriate.

SMS Communications

SMS Communications: We do not share mobile contact information with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors in support services, such as customer service. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Tour Guides and Team Members

Your booking information is shared with our tour guides and operational team members as necessary to deliver our services and provide you with the best experience.

Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Legal Requirements

We may disclose your information when required by law, court order, or government request, or to protect our rights, safety, or property.

With Your Consent

We may share your information for other purposes with your explicit consent.

4. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to:

• Enable essential website functionality

• Remember your preferences and login status

• Analyze website traffic and user behavior

• Deliver targeted advertising on social media platforms

• Track the effectiveness of our marketing campaigns

Types of Cookies We Use

Essential Cookies (Session): Required for the website to function, including authentication and booking processes.

Functionality Cookies (Persistent): Remember your preferences, such as language settings and login details.

Analytics Cookies (Persistent): Help us understand how visitors use our website through Google Analytics.

Marketing Cookies (Persistent): Track your activity across websites to deliver relevant advertisements on social media and other platforms.

Your Cookie Choices

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of our website. Most browsers accept cookies automatically, but you can modify your settings to decline cookies if you prefer.

For more information about cookies, visit aboutcookies.org.

5. Data Retention

We retain your personal information as follows:

• Booking and Transaction Records: Retained for accounting and tax purposes as required by Canadian law

• Marketing Email Lists: Until you unsubscribe or request deletion

• Account Information: Until you request account deletion or after extended periods of inactivity

• Usage Data: Typically retained for up to 2 years for analytics purposes

• Gift Card Records: Retained for the validity period of the gift card plus additional time for accounting purposes

• Recruitment Records: Retained for up to 36 months after the end of the hiring process (or your last interaction with us), unless a longer retention period is required or permitted by law.

When information is no longer needed, we securely delete or anonymize it.

6. International Data Transfers

Your information may be processed and stored in Canada and the United States. By using our services, you consent to the transfer of your information to these locations. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

7. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you

• Correction: Update or correct inaccurate information

• Deletion: Request deletion of your personal information (subject to legal retention requirements)

• Opt-Out: Unsubscribe from marketing communications at any time

• Withdrawal of Consent: Withdraw consent for data processing where we rely on consent

How to Exercise Your Rights

• Update Account Information: Log into your account and visit account settings

• Unsubscribe from Marketing: Click the “unsubscribe” link in any marketing email or email us at info@hauntedwalk.com

• Other Requests: Contact us at info@hauntedwalk.com

We will respond to your requests within a reasonable timeframe, typically within 30 days.

If you are not satisfied with our response, you may have the right to contact your local privacy regulator, such as the Office of the Privacy Commissioner of Canada or your provincial privacy regulator, for further guidance.

8. Security

We implement reasonable physical, technical, and administrative safeguards to protect your personal information from unauthorized access, use, or disclosure. These measures include:

• Secure data encryption for payment processing

• Limited access to personal information by employees and contractors on a need-to-know basis

• Regular security assessments and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children’s Privacy

Our tours are family-friendly, and guests under 16 must be accompanied by an adult. We do not knowingly collect personal information directly from children under 13 without parental consent.

If a parent or guardian books a tour that includes children, we collect only the information necessary to provide the service (such as the number of guests). If you believe we have collected information from a child under 13 without proper consent, please contact us immediately at info@hauntedwalk.com.

10. Third-Party Websites

Our website may contain links to third-party websites, including social media platforms and partner sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the “Last updated” date at the top of this policy

• Notify you via email (if you have provided an email address)

• Post a prominent notice on our website

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

Hidden InSite Inc. (The Haunted Walk)
46 Sparks Street
Ottawa, ON K1P 5A8
Canada

Email: info@hauntedwalk.com