Last updated: [date of owner review]
This policy explains how Mehfil Social (“we”, “us”) collects, uses and protects personal information through this website. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).
Information we collect
- Account information: your name, email address and, if you choose, a phone number. If you register with email, your password is stored only as a secure one-way hash. If you sign in with Google, we receive your name, email address and a Google account identifier; we never receive your Google password.
- Orders and tickets: the events and tickets you buy, amounts paid, order status, ticket codes and check-in records.
- Payments: card and payment details are entered directly on Stripe’s secure checkout page. We do not see or store your full card number. Stripe shares with us the payment status and limited details such as the payment method type.
- Newsletter: your email address, the consent you gave, when and how you gave it, and your subscription status.
- Contact messages: what you send us through the contact form.
- Technical information: IP address and browser information used for security (for example, rate limiting and fraud prevention), and cookie preferences.
How we use it
- To create and secure your account, including sending one-time verification codes.
- To process ticket purchases, deliver tickets, check tickets at the door and handle refunds.
- To send service messages about your orders and events you are attending (for example, confirmations and reminders).
- To send newsletters only if you have given express consent. You can unsubscribe at any time.
- To respond to your messages, prevent fraud and abuse, and meet legal and accounting obligations.
Service providers
We share information only as needed with providers who help us run the website:
- Stripe (payment processing). See Stripe’s privacy policy at stripe.com/privacy.
- Google (Google Sign-In if you choose it; Google Maps and Google reviews shown on our partner pages; Google Analytics only if you accept analytics cookies).
- Hostinger (website and email hosting).
- Eventbrite, when an event’s tickets are sold through Eventbrite. Purchases there are governed by Eventbrite’s own policies.
Some providers may store or process information outside Canada, including in the United States, where it may be subject to local laws.
Retention
We keep order and payment records as long as needed for accounting and legal purposes. You can ask us to delete your account; we will remove or anonymise information we are not required to keep.
Your choices and rights
You can view and update your profile in your account, change cookie preferences at any time using the “Cookie preferences” link in the footer, and unsubscribe from newsletters using the link in any newsletter or in your account. You may request access to, or correction of, the personal information we hold about you by contacting us.
Security
We use encrypted connections (HTTPS), hashed passwords, time-limited verification codes, access controls for staff and audit logging. No system is perfectly secure, but we work to protect your information.
Contact
For privacy questions or requests, contact us using the details on our Contact page. [Owner: add the name or title of the person responsible for privacy.]
Last updated 23 October 2026