This notice describes how Behaviour (the agency operating the Glenlivet x Cabot Highlands booking site at theglenlivetclubhouse.netlify.app) collects, uses, and retains your personal information. It is written to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
When you make a booking, we collect:
- Your first and last name
- Your email address
- Your phone number
- Your company or organisation name (optional)
- The engraving message for your bottle
- The same information for a second pair, if you book two pairs
- Confirmation that you and all guests are 19 years of age or older
Payment information (credit card details) is collected and stored by Square, our payment processor. We never see or store your card number; we only receive a payment confirmation.
Why we collect it
- To confirm your booking and reserve your time slot
- To send you a booking confirmation, receipt, and calendar invitation
- To contact you if there is a change to your booking or the event
- To verify that you are of legal drinking age in Ontario
Who has access
Your information is accessible only to:
- The Behaviour team members operating the event
- Supabase, our database provider (data hosted in North America)
- Resend, our email service (used to send your confirmation)
- Square, our payment processor (payment data only)
- Netlify, our hosting provider
We do not sell, rent, or share your information with any other third party.
How long we keep it
Your contact information (name, email, phone, engraving message) is automatically redacted from our database 90 days after the event (by September 9, 2026). Booking metadata (date, time, payment confirmation) is retained for accounting purposes for up to 7 years, in line with Canadian tax record-keeping requirements.
Your rights under PIPEDA
You may at any time:
- Request a copy of the personal information we hold about you
- Request that we correct any inaccurate information
- Request that we delete your information before the 90-day window expires
- Withdraw consent for our continued use of your information
To exercise any of these rights, email leanne.karat@behaviour.com with the subject line “Privacy Request” and include the name and email address used for your booking.
Security
Data is transmitted over HTTPS. Our database enforces row-level security and is accessible only to authenticated service accounts. We do not store payment card numbers. If we discover a security breach affecting your information, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
Cookies
The site uses no analytics cookies and no tracking pixels. A small amount of information is kept in your browser’s session storage to maintain your booking state across the payment redirect; this is cleared as soon as your booking is confirmed.
Questions or complaints
For privacy questions or to file a complaint, contact leanne.karat@behaviour.com. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
← Back to booking