Privacy Policy

1. Who we are

This Privacy Policy applies to Bushwacker Paintball Games ("we", "us"), operating at 9535 Highway 97, Vernon, BC, Canada. We collect, use, and disclose personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada. Our website is operated at bushwackerpaintball.com.

2. Information we collect

We only collect what we need to run paintball bookings, fulfill waiver and safety requirements, and (with your consent) keep you in the loop about upcoming events.

• Bookings & inquiries: organizer name, email, phone, group size, requested date/time, party name, and any notes you provide.
• Waivers: player full name, email, phone, date of birth, signature image, and — for participants under 19 — guardian name, phone, email, and guardian signature.
• Optional consents you check on the waiver (liability, media use, marketing email).
• Payments: handled by Square. We never see or store your full card number, CVV, or expiry date — Square returns only a tokenized reference and the last 4 digits of the card.
• Season Pass members: in addition to the above, we store membership status, visit history, and login token for the member portal.
• Operational telemetry: IP address and browser user-agent attached to waiver submissions for fraud / audit purposes.
• Cookies & analytics: a Google Analytics 4 identifier, a cookie consent flag, and admin session cookies (only for staff devices). See section 7.

3. How we use your information

• Confirm and fulfill your booking, including communicating slot details, balance owing, and game-day instructions.
• Comply with safety, liability, and insurance requirements that require a signed waiver on file.
• Provide the organizer portal so the person who booked can track waiver progress and invite players.
• Send transactional emails (booking confirmation, waiver receipt, reminders) — these are not marketing and continue regardless of consent.
• If — and only if — you explicitly check the marketing consent box, send occasional emails about events, promotions, and walk-on days. Each such email contains a one-click unsubscribe link, in compliance with Canadian Anti-Spam Legislation (CASL).
• Improve our site and services via aggregated analytics (page views, top pages).

4. Who we share information with

We do not sell, rent, or trade your personal information. We share information only with the following processors and only to the extent necessary to run our service:

• Square, Inc. — payment processing and POS terminal. Square holds card details under PCI-DSS compliance.
• SendGrid (Twilio Inc.) — transactional and marketing email delivery on our behalf.
• Render Services, Inc. — application and database hosting (Oregon, USA). See section 8 on cross-border storage.
• Google LLC — Google Analytics, used to measure site traffic in aggregate.
• Insurance providers, referees, or law enforcement when legally required (e.g. an incident on the field that requires a waiver to be produced).

5. How long we keep your information

• Signed waivers: minimum seven (7) years from the booking date, to satisfy provincial limitation periods on personal-injury claims.
• Booking and payment records: seven (7) years to satisfy Canada Revenue Agency record-keeping requirements.
• Marketing email list: until you unsubscribe. Unsubscribe entries are kept in a suppression list indefinitely so we don't accidentally re-add you.
• Booking inquiries that don't convert: purged after twelve (12) months.
• Web analytics (Google Analytics): aggregated and anonymized after fourteen (14) months per Google's default retention.

6. Children's information

We do not knowingly collect information from anyone under 13 without parental involvement. For paintball participants under 19 (the age of majority in BC), our waiver requires a parent or legal guardian to provide their own contact information and sign on the participant's behalf. Guardian details are stored on the waiver and used only for safety and emergency contact during the booking. If you believe a child's information has been provided to us without proper authorization, contact us and we will delete it.

7. Cookies, analytics, and tracking

Our site uses a small number of cookies and similar technologies:

• Strictly necessary: admin session cookie (staff devices only), cookie consent flag, CSRF token.
• Analytics: Google Analytics 4 (anonymized IP). You can opt out at https://tools.google.com/dlpage/gaoptout or by disabling cookies in your browser.
• No advertising, retargeting, or social-network tracking pixels are loaded on bushwackerpaintball.com.

8. Cross-border data storage

Our application and database are hosted by Render Services, Inc. in Oregon, USA. Email delivery is handled by SendGrid in the United States. Payments are processed by Square, also in the United States. While the U.S. has a different privacy-law framework than Canada, all three providers maintain industry-standard security controls (encryption in transit and at rest, role-based access, audit logging) and are contractually obligated to process your information only on our behalf. By submitting your information to us, you consent to its storage and processing in the United States and Canada.

9. Your rights

Under PIPEDA and BC's Personal Information Protection Act, you have the right to:

• Ask what personal information we hold about you and request a copy.
• Request correction of inaccurate information.
• Withdraw marketing consent at any time using the unsubscribe link in any marketing email, or by emailing us.
• Request deletion of your information, subject to records we are legally required to retain (waivers, payment records — see section 5).
• Submit a complaint to us, and if unresolved, to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

10. Security

We use TLS encryption for all web traffic, encrypted-at-rest storage for our database, role-based access for staff, audit logging of admin actions, and secure-by-default cookie attributes. While no system is fully impenetrable, we follow industry best practices and notify affected individuals and the appropriate regulator without undue delay if a privacy breach materially affects you.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via a notice on the site and, where appropriate, by email to active customers. The effective date below indicates when the current version took effect.