Privacy

Your privacy, simply.

No jargon, no tricks. Here is what we do with your information, how we protect it and how to exercise your rights.

Exercise my rightsPrivacy policyLast updated: November 6, 2026

Our commitments

Clear consent

Separate choices, never pre-ticked, and refusing is as easy as accepting.

Minimal data

We only collect what is needed for the ticket, the payment and the service.

European hosting

Our application and database are hosted in the European Union.

Your rights

Quebec’s Law 25 gives you rights over your personal information. We respond within 30 days.

Access

Know what information we hold and get a copy of it.

Exercise my rights

Rectification

Correct a name, email, phone number or address.

Exercise my rights

Erasure

Ask us to erase information we no longer need to keep.

Exercise my rights

Portability

Receive your computerised information in a structured, commonly used format.

Exercise my rights

De-indexing

Ask us to stop disseminating or de-index public content.

Exercise my rights

Automated decision

Get an explanation and a human review when a decision is automated.

Exercise my rights

Cookies

Essential cookies run the site. The other categories are off by default and only turn on with your consent.

Essential

Session, cart, security, language and basic preferences.

Comfort

City, market and display preferences.

Analytics

Aggregated statistics, with no advertising profiling.

Marketing

Personalised communications and campaign measurement.

Our processors

These providers process information on our behalf. The applicable contractual and technical safeguards are summarised below; the full list is available from the Privacy Officer.

Provider	Role	Location	Safeguards
Hetzner	Hosting and storage	Germany (EU)	Encryption, ISO 27001, BSI C5, SSE-C (agreement to confirm)
Neon	PostgreSQL database	Frankfurt (EU)	Encryption at rest, restricted access (agreement to confirm)
Sentry	Error monitoring	EU / United States	PII scrubbing, no replay (agreement to confirm)
Resend	Transactional email	United States	Minimisation, contractual clauses (agreement to confirm)
Moneris	Payments	Canada	PCI-DSS, tokenisation (agreement to confirm)
Google	Maps and anti-bot	United States	Map and autocomplete loaded after consent, reCAPTCHA for security (agreement to confirm)

Security

TLS in transit, encryption at rest, application-level encryption of banking data, audit log, role-based access, encrypted backups and regular access reviews.

Privacy officer

Alexan Artun

For any question, request or complaint, write to us. You may also complain to the Commission d’accès à l’information du Québec (CAI).

[email protected]

5520 Chabot, Suite 204, Montreal, Quebec H2K 2S7