Privacy
This page explains what Noor Gardens does with the information you give when you ask to book a room, why, and for how long. It is written to Canada’s federal privacy law, PIPEDA.
What we collect
When you ask to book a room we collect the name, phone number and email address you type, what the event is for, how many people you expect, and any note you add. Nothing else. You do not create an account and we never ask for a password.
When someone signs in to run the bookings, we hold their email address and the sign in codes we send them.
We keep a one way scrambled version of the network address a booking request came from, purely to stop one person flooding us with requests. The address itself is never stored and cannot be worked back out. Those records are deleted after two days.
Who can see it
Only the people who run Noor Gardens. The public availability calendar shows busy time as “unavailable” and never shows anybody’s name, phone number or what their event is for.
How long we keep it
- Bookings that went ahead: your contact details are removed 12 months after the booking date. The room, date and price stay in our own records.
- Requests that were declined, cancelled or never answered: contact details are removed after 3 months.
- Sign in codes: deleted within a day. Sign in sessions last 30 days, and the record of them is deleted a week after that.
- Emails we have sent you: the address and link are wiped from our sending records two weeks after delivery.
- Anti flooding records: deleted after two days.
We can also remove someone’s details from a booking straight away, on request.
Backups
We take an encrypted copy of the database once a day so nothing is lost if something breaks. Copies are kept for 90 days and then destroyed. This means details you asked us to remove can survive inside a backup copy for up to 90 more days before they are gone for good.
Where it is held
Our servers and database are hosted in the United States. That means your information is stored and processed there, and may be accessible to United States authorities under their laws.
Who else touches it
We use Resend to deliver email, Railway to run the website and hold the database (including room photos), and Sentry to record technical errors. They handle it only to provide those services to us.
We never sell it, and we do not use it for advertising.
Seeing, correcting or removing your information
Every booking email contains a link to your own booking, where you can check it and cancel it. To see, correct or remove anything else, write to us at bookings@london.macnet.ca. We answer within 30 days. If you are not satisfied you can complain to the Office of the Privacy Commissioner of Canada.