Privacy Policy
Corporation No. 8892746 | GST/HST No. 889 274 615 RT0001
Website: grandvessianofflineclub.com
Effective date: 1 June 2025
1. Introduction
("we", "us" or "our") operates the physical hotel and casino located in Prince Rupert, British Columbia, Canada, and the informational website at grandvessianofflineclub.com (the "Website"). We are committed to protecting the privacy and personal information of every person who visits our Website or contacts us in connection with a stay or visit at our property.
This Privacy Policy explains what personal information we collect through the Website, why we collect it, how we use and protect it, with whom we may share it, how long we keep it, and what rights you have in relation to it. It applies solely to personal information processed through the Website and the enquiry and reservation-request activities carried out via the Website.
This policy is issued in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Protection Act (PIPA) of British Columbia, together with any other applicable Canadian privacy legislation. By using the Website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The data controller responsible for personal information collected through the Website is:
| Legal entity | |
|---|---|
| Registered address | |
| Corporation number | 8892746 |
| GST/HST number | 889 274 615 RT0001 |
| Privacy contact | privacy@grandvessianofflineclub.com |
Our designated Privacy Officer can be reached at the privacy email address listed above and is responsible for overseeing our compliance with applicable privacy legislation.
3. Personal Information We Collect
We collect only the personal information that is necessary to fulfil the purposes described in this policy. The categories of personal information we may collect through the Website are set out below.
3.1 Contact and Reservation-Request Information
When you submit an enquiry form, a reservation request, or any other communication through the Website, we may collect:
- Full name
- Email address
- Telephone number
- Preferred dates of arrival and departure
- Room-type or accommodation preferences
- Number of guests
- Special requests or preferences included in your message
- Any other personal information you voluntarily include in your correspondence
3.2 Device and Technical Information
When you access the Website, certain technical information is automatically collected by our web servers and, where applicable, through consent-based technologies. This may include:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Pages viewed and navigation paths within the Website
- Date and time of your visit
- Referring website address
- Session duration
3.3 Consent and Preference Data
Where the Website presents consent choices — for example, in relation to non-essential cookies or marketing communications — we record the choices you make, together with the date and time those choices were made, so that we can honour your preferences and demonstrate compliance with our obligations.
3.4 Special-Category Personal Data
We do not intentionally request or seek to collect special-category personal data through the Website. If you voluntarily include such information in a free-text field, we will treat it with the highest degree of care and will process it only to the extent necessary to respond to your request. We encourage you to avoid including such information unless it is strictly necessary for us to assist you.
3.5 Casino-Eligibility Age
Our casino facility is open only to guests who are 18 years of age or older. The Website is not directed at individuals under the age of 18, and we do not knowingly collect personal information from anyone under that age. If we become aware that personal information has been submitted by a person under 18, we will delete it promptly.
4. Purposes and Legal Bases for Processing
The table below sets out each purpose for which we process your personal information, together with the legal basis on which we rely under applicable Canadian privacy law.
| Purpose | Description | Legal Basis |
|---|---|---|
| Responding to enquiries | To read, assess and respond to questions, reservation requests and other communications submitted through the Website. | Your knowledge and consent (implied or express) at the time of submission; performance of pre-contractual steps taken at your request. |
| Reservation facilitation | To process, confirm and administer accommodation and hospitality reservation requests initiated via the Website. | Performance of a contract or steps taken at your request prior to entering into a contract. |
| Website operation and security | To maintain the technical operation, integrity and security of the Website, identify and resolve technical issues, and prevent fraudulent or abusive activity. | Legitimate interests in operating a secure, reliable website; legal obligation where applicable. |
| Analytics and improvement | To understand how visitors use the Website so that we can improve its content, structure and functionality. | Your consent where consent-based tools are used; otherwise our legitimate interests in improving our services, balanced against your privacy interests. |
| Marketing communications | To send you promotional information about our hotel and casino, where you have opted in to receive such communications. | Your express consent, which you may withdraw at any time. |
| Legal compliance | To comply with applicable laws, regulations, court orders or government authority requests. | Legal obligation. |
| Consent record-keeping | To record and honour the privacy and marketing preferences you have expressed. | Legal obligation; legitimate interests in demonstrating compliance. |
6. Recipients and Disclosure of Personal Information
We do not sell, rent or trade your personal information to third parties. We may share your personal information only in the circumstances described below.
6.1 Service Providers
We engage trusted third-party service providers who process personal information on our behalf and under our instructions in order to help us operate the Website and deliver our services. These providers may include:
- Web hosting and infrastructure providers
- Email delivery and communication platform providers
- Website analytics providers (subject to your consent)
- Customer relationship management system providers
All service providers are required by contract to protect your personal information, to use it only for the purposes we specify, and to comply with applicable privacy legislation.
6.2 Legal and Regulatory Disclosure
We may disclose personal information if required to do so by law, regulation, court order, or at the request of a governmental or regulatory authority. We will, where permitted by law, notify you of such a requirement before disclosing your information.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets involving , personal information held by us may be transferred to the successor entity, subject to that entity assuming the same privacy obligations set out in this policy. We will notify you of any such transfer and any material changes to this policy that result from it.
6.4 With Your Consent
We may share your personal information with other third parties where you have given us your express consent to do so.
7. International Transfers of Personal Information
Our primary operations are based in British Columbia, Canada. Some of our third-party service providers may store or process personal information on servers located outside of Canada, including in the United States or other jurisdictions. When personal information is transferred outside Canada, we take steps to ensure that it receives a comparable level of protection by requiring appropriate contractual safeguards, including data processing agreements that impose privacy and security obligations on the recipient consistent with applicable Canadian law.
Please be aware that personal information stored or processed in another country is subject to the laws of that country, which may differ from Canadian privacy law. By using the Website and providing your personal information, you acknowledge that your information may be transferred to and processed in countries outside Canada as described in this section.
8. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention principles apply:
| Category of Information | General Retention Period |
|---|---|
| Enquiry and contact correspondence | Up to 24 months from the date of your last communication, or longer if a reservation or stay results from the enquiry. |
| Reservation-request records | For the duration of any contractual relationship with us and for a reasonable period thereafter, in accordance with applicable limitation periods under Canadian law. |
| Website technical and device logs | Up to 12 months from the date of collection, unless a longer period is required for security or legal compliance purposes. |
| Consent and preference records | For as long as we continue to process your personal information on the basis of that consent, plus a further period sufficient to demonstrate compliance. |
| Marketing communications lists | Until you withdraw your consent to receive marketing communications, after which your information will be suppressed or deleted in accordance with your request. |
When personal information is no longer required, we securely destroy, anonymise or delete it in accordance with our internal data-management procedures.
9. Security of Personal Information
We implement appropriate organisational and technical safeguards designed to protect your personal information against unauthorised access, disclosure, alteration, loss or destruction. These measures are proportionate to the nature and sensitivity of the personal information we hold and the risks associated with its processing.
Our security practices include, among other measures:
- Use of encrypted connections (TLS/HTTPS) for the transmission of personal information via the Website
- Access controls that restrict access to personal information to authorised personnel who require it to carry out their responsibilities
- Secure storage systems with appropriate access logging
- Regular review of our information security practices
- Contractual requirements imposed on service providers to maintain appropriate security standards
No method of transmission over the internet or method of electronic storage is entirely secure. While we strive to apply commercially reasonable measures to protect your personal information, we cannot guarantee its absolute security. In the event of a privacy breach that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.
10. Your Privacy Rights
As an individual whose personal information we hold, you have a number of rights under applicable Canadian privacy legislation. We will respond to all rights requests without undue delay and within the timeframes required by law.
10.1 Right of Access
You have the right to request access to the personal information we hold about you and to obtain information about how it is processed. We will provide you with a copy of your personal information in a readable format, subject to any exemptions permitted by law.
10.2 Right to Correction
If you believe that personal information we hold about you is inaccurate, incomplete or outdated, you have the right to request that we correct or update it. Where we do not agree that a correction is warranted, we will note your request in our records.
10.3 Right to Withdraw Consent
Where we process your personal information on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal. Please note that withdrawing consent may affect our ability to provide you with certain services or communications.
10.4 Right to Erasure and Restriction
In certain circumstances, you may request that we delete personal information we hold about you or restrict the way in which we use it. We will consider each such request in accordance with our legal obligations and may need to retain certain information for legal or compliance purposes.
10.5 Right to Object to Marketing
You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions included in any such communication or by contacting us at the privacy email address below.
10.6 Right to Lodge a Complaint
If you believe that we have not handled your personal information in accordance with applicable privacy law, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada. Details on how to file a complaint are available at the Office of the Privacy Commissioner's official website.
10.7 How to Exercise Your Rights
To exercise any of the rights described in this section, please submit a written request to our Privacy Officer at privacy@grandvessianofflineclub.com. To protect your privacy and security, we may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law and will inform you if we require additional time or information to complete your request.
11. Third-Party Links
The Website may contain links to external websites or resources operated by third parties. This Privacy Policy applies only to the Website operated by We have no control over, and accept no responsibility for, the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any external websites you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, or applicable legislation. When we make material changes to this policy, we will update the effective date at the top of this page and, where appropriate, provide additional notice to you. We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal information.
Your continued use of the Website following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and, where consent is the applicable legal basis, your consent to the updated terms to the extent permitted by law.
13. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:
Privacy OfficerEmail: privacy@grandvessianofflineclub.com
We are committed to working with you to resolve any concerns about your personal information in a fair and timely manner.