Privacy Policy
Last Updated: October 3, 2026
1. Introduction
BookLocalPG ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our booking platform at booklocalpg.com and its subdomains.
2. Information We Collect
2.1 Information You Provide
When you register as a business, create a customer account or make a booking, we collect:
- Business Information: Business name, email address, phone number, physical address, booking URL
- Customer Information: Name, email address, phone number (if required), booking notes
- Customer Account Information: If you create a customer account: your name, email address, phone number (optional) and any addresses you save (see Section 8)
- Account Credentials: Email and password (encrypted)
- Donation Payment Information: If you choose to make a voluntary donation, payment details are processed securely through Stripe (we do not store credit card details)
2.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on the platform. Detailed usage data is only collected through Google Analytics if you allow it (see Section 9)
- Device Information: IP address, browser type, operating system
- Cookies: Necessary cookies that keep you logged in and remember your cookie choice, plus optional analytics cookies you can accept or reject (see Section 9)
3. How We Use Your Information
We use collected information to:
- Provide and maintain the booking service
- Process and confirm bookings
- Send booking confirmations, reminders, and cancellation notices
- Process voluntary donations
- Communicate service updates and changes
- Respond to support requests
- Improve our platform and develop new features
- Prevent fraud and ensure platform security
- Comply with legal obligations
4. How We Share Your Information
4.1 With Other Users
Customer booking information is shared with the business receiving the booking to facilitate the appointment.
4.2 Service Providers
We share data with trusted third-party service providers:
- Supabase: Database and authentication services
- Stripe: Donation payment processing
- Resend: Transactional email delivery
- Cloudflare: Hosting, content delivery and Cloudflare Web Analytics (cookieless visitor counts)
- Google: Google Analytics, only if you allow analytics cookies. Google may store and process this data outside Canada
4.3 Legal Requirements
We may disclose your information if required by law, court order, or to protect our rights, property, or safety.
4.4 Business Transfers
In the event of a merger, acquisition, or asset sale, your information may be transferred to the acquiring entity.
5. Data Security
We implement security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Encrypted password storage
- Row-level security on database tables
- Secure session management with HTTPOnly cookies
- Regular security updates and monitoring
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information within 90 days, except where we must retain it for legal or regulatory purposes.
Google Analytics data is kept for 14 months from a visitor's last activity, then deleted by Google.
7. Your Rights
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and data
- Portability: Request your data in a structured format
- Object: Object to certain data processing activities
To exercise these rights, contact us at support@booklocalpg.com
8. Customer Accounts
You can book without an account. If you create a customer account, this section explains what it holds, what the businesses you book with keep, and what happens when you delete it.
8.1 What Your Account Stores
Your account stores only what you give us:
- Your name
- Your email address
- Your phone number, if you add one
- Addresses you save, so you don't have to type them again
Your password is stored encrypted. We use these details to sign you in, fill in your booking forms and show you your bookings.
8.2 Your Bookings
Bookings and quote requests made with your email address are added to your account automatically. This includes ones you made before you had an account.
8.3 What Businesses Keep
Each business you book with keeps its own record of your bookings with them. A business may also keep private notes about you or your visits. Those notes are not shown in your account. These records are the business's own business records. To ask about them, contact the business.
8.4 Deleting Your Account
You can delete your customer account yourself, from your account settings. You don't need to ask us. Deleting it removes your sign-in, your profile and your saved addresses.
What remains afterwards: the businesses you booked with keep their records of your bookings, with the details given when each booking was made. Those bookings are no longer linked to an account.
8.5 British Columbia Privacy Law (PIPA)
We handle customer accounts in line with British Columbia's Personal Information Protection Act (PIPA). Your account holds only what you gave us, and you can delete it yourself at any time. The booking records a business keeps are that business's own records. For anything else about your information, contact us at support@booklocalpg.com.
9. Cookies and Analytics
Some cookies are necessary to run the platform. Analytics cookies are optional, and nothing that sets them or sends data to Google loads until you say yes. Saying no doesn't change what you can do on the site.
9.1 What We Measure and Why
- Google Analytics (optional): If you accept analytics cookies, we use Google Analytics to count page views and see how people move through browsing, booking and signing up, so we can improve the platform. Google acts as our service provider and may store and process this data outside Canada. Before a page address is sent, we remove booking and review links, login tokens, dashboard searches and anything else that could identify a customer, and we never send names, email addresses, phone numbers or messages.
- Bookings, quote requests and donations: When one of these is completed, our server may report that it happened (for example, "a booking was submitted") to Google Analytics. This only happens if you've accepted analytics cookies, and it never includes your personal details.
- Cloudflare Web Analytics: We count overall visits with Cloudflare Web Analytics for everyone. It doesn't use cookies, doesn't store identifiers and doesn't fingerprint your device, so it runs whether or not you accept analytics cookies.
9.2 Cookies We Use
| Cookie | Category | Lifetime | Purpose |
|---|---|---|---|
sb-<project>-auth-token | Necessary | 12 hours for business accounts, 30 days for customer accounts, renewed while you're active | Keeps you logged in (Supabase authentication) |
sb-<project>-admin-impersonation | Necessary | 12 hours | Only set for BookLocalPG staff while they help a business with its account |
blpg_preview | Necessary | 30 days | Staff only. Lets our staff try features before release |
blpg_consent | Necessary | 12 months | Remembers your cookie choice |
blpg_evt | Analytics | 60 seconds | Carries the name of a single event (such as a sign-up) across a page redirect. Only set if you've accepted analytics cookies |
_ga, _ga_<id> | Analytics | Up to 2 years | Google Analytics: tells visits from the same browser apart. Only set if you've accepted analytics cookies |
Google Analytics data is kept for 14 months from a visitor's last activity. We don't use marketing or advertising cookies.
9.3 Changing Your Choice
You can change your mind at any time using the "Cookie settings" link at the bottom of any page (or in the dashboard menu if you're logged in). If you withdraw consent, we stop sending analytics data and delete the Google Analytics cookies from your browser straight away. You can also block or delete cookies through your browser settings, but blocking necessary cookies may stop features like logging in from working.
10. Children's Privacy
BookLocalPG is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
11. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. International Users
BookLocalPG is based in Canada and primarily serves businesses in Prince George, BC. If you access our Service from outside Canada, your information may be transferred to and processed in Canada. By using our Service, you consent to such transfers. Some of our service providers, including Google if you accept analytics cookies, may store and process data outside Canada.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. The "Last Updated" date at the top of this policy reflects the most recent revision.
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: support@booklocalpg.com
Address: BookLocalPG, Prince George, BC, Canada
15. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to deletion
- Right to non-discrimination for exercising CCPA rights
16. Canadian Privacy Compliance (PIPEDA)
We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We:
- Obtain meaningful consent for collection, use, and disclosure of personal information
- Limit collection to what is necessary for identified purposes
- Protect personal information with appropriate safeguards
- Provide access to individuals to review and correct their information
- Retain information only as long as necessary