Privacy Policy

Last updated: February 5, 2026

1. Introduction

GroupDeck ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cruise group management platform (the "Service").

We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

2. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, company name, and password when you register.
  • Passenger Data: Names, passport numbers, dates of birth, nationalities, and other travel document information that you input for cruise manifests.
  • Payment Information: Billing details and payment tracking data for your groups (we do not store credit card numbers directly).
  • Usage Data: Information about how you use the Service, including log data and analytics.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Generate cruise manifests and travel documents
  • Process and track payments for your groups
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your personal information:

  • All data is encrypted in transit using TLS/SSL
  • Data at rest is encrypted using AES-256 encryption
  • Access to personal data is restricted to authorized personnel only
  • Regular security audits and monitoring are performed

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

  • With your consent or at your direction
  • With service providers who assist in operating our platform
  • To comply with legal obligations or respond to lawful requests
  • To protect the rights, property, or safety of GroupDeck, our users, or others

6. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

  • Access your personal information held by us
  • Request correction of inaccurate information
  • Withdraw consent to the collection, use, or disclosure of your information
  • File a complaint with the Privacy Commissioner of Canada

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: hello@groupdeck.co

Location: Winnipeg, Manitoba, Canada