Bundleby — Privacy Policy

Last updated: August 9, 2026

This Privacy Policy explains how Bundleby Inc. ("Bundleby", "we", "our", "us") collects, uses, shares, and protects your personal information when you use our website at bundleby.com (the "Site") and buy or redeem our experience bundles ("Bundles").

We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). By using the Service or buying a Bundle, you agree to this Policy. If you don't agree, please don't use the Service.

1. Who we are

Bundleby is a Toronto-based company that curates experiences from independent local businesses ("Merchants") into ready-made, bookable Bundles. We are the company responsible for the personal information described here. To reach us about privacy, see Section 11.

2. What we collect

We only collect what we need to sell you a Bundle, deliver it, and support you.

You give us:

• Your name, email address, and (if provided) phone number, so we can send your confirmation and contact you about your order.

• Your booking details — the Bundle you chose, your dinner and drink selections, and the date and time you selected.

• Any messages you send us (for example, by email or social media) and reviews or content you post.

We do not collect dietary or allergy information. If you have allergies or dietary needs, please speak with your server at the venue when you arrive, and they'll pass it on to the right staff.

Collected automatically:

• Basic technical and usage information when you visit the Site — such as your device type, browser, and pages viewed — through our website host and any analytics or cookies we use.

Payment information:

• When you pay, our payment processor (Stripe) collects and processes your card details directly. We do not see or store your full card number. We receive only limited confirmation information (such as that a payment succeeded, and the last digits or card type).

We do not knowingly collect information from anyone under 18. The Service is for adults only.

3. Why we use it

We use your personal information to:

• process your purchase and send your confirmation and redemption codes;

• share the booking with the Merchants so they can prepare for and honour your visit (see Section 4);

• provide customer support, handle rescheduling, and respond to your messages;

• accommodate dietary, allergy, or accessibility needs you tell us about;

• prevent fraud, protect the Service, and meet our legal and tax obligations;

• with your consent, send you occasional marketing about Bundleby (you can opt out anytime — see Section 6).

We rely on your consent to collect and use your information for these purposes. Buying a Bundle is your consent for the purposes needed to deliver it.

4. Who we share it with

We are not in the business of selling your personal information, and we never will. We share it only as needed to run the Service:

• Merchants (the venues in your Bundle). To honour your booking, we share the details a venue needs — typically your name, your booking date and time, your selected items, and your redemption code. Each Merchant receives only the bookings for its own venue. Once shared, the Merchant handles that information under its own privacy practices, which we don't control.

• Service providers who help us operate, including:

  • Stripe — payment processing and Merchant payouts;

  • Hostinger — website hosting;

  • Zapier and Google — order automation and booking records;

  These providers may only use your information to perform services for us.

• Legal and safety. We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of Bundleby, our customers, or others.

• Business changes. If Bundleby is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that, subject to this Policy.

5. Where your information is processed

Some of our service providers (including Stripe) operate outside Canada, including in the United States. This means your personal information may be stored or processed outside Canada and may be subject to the laws of those countries, including lawful access by their authorities. We use reputable providers and take reasonable steps to protect your information wherever it's processed.

6. Marketing and your choices

If we send you marketing emails, every message includes an unsubscribe link, and you can opt out at any time. Opting out of marketing won't stop the essential messages we need to send about your order (like your confirmation or a reschedule).

7. How long we keep it

We keep your personal information only as long as needed for the purposes above — to deliver your Bundle, support you, and meet legal, tax, and accounting requirements. After that, we securely delete or anonymize it. Booking records shared with Merchants are retained by each Merchant under its own practices.

8. Your rights

Under PIPEDA, you can:

• access the personal information we hold about you and ask how we've used and shared it;

• ask us to correct information that's wrong or incomplete;

• withdraw consent for uses that aren't required to deliver a Bundle you've bought (this may limit what we can offer you).

To make a request, email us at hello@bundleby.com. We'll respond within the timeframes the law requires. We may need to verify your identity first.

9. How we protect your information

We take reasonable administrative and technical steps to protect your information, and we rely on established providers (like Stripe for payments) who maintain their own security standards. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security — but we work to protect your information and to respond promptly if something goes wrong.

10. Changes to this Policy

We may update this Policy from time to time. If we make a significant change, we'll post the updated Policy here with a new "Last updated" date and, where appropriate, let you know by other means.

11. Contact us and complaints

Questions, requests, or concerns about your privacy? Contact us at:

Bundleby Inc. 623 Finch Avenue West Toronto, Ontario M2R 3V4 Canada Email: hello@bundleby.com

If you're not satisfied with how we've handled your concern, you have the right to contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).