onekelowna Privacy Policy

Last updated: October 30, 2026

onekelowna is operated by ONEKELOWNA, a business registered in British Columbia (business number 748717832BC0001), based in Kelowna, British Columbia, Canada ("onekelowna", "we", "us", "our").

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to our website, our waitlist, our membership and the digital membership pass.

We handle personal information in accordance with British Columbia's Personal Information Protection Act (PIPA) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Privacy Officer: ONEKELOWNA Privacy Officer · hello@onekelowna.com

1. Information we collect

Waitlist

If you join our waitlist, we collect your email address and the date you signed up, so we can tell you when onekelowna launches and send you the updates you agreed to.

Information you give us as a member

  • Name

  • Email address

  • Billing address or postal code, as needed for payment

  • Any information you include when you contact us

We may add optional features in the future that use other information, such as a phone number, a display name or photo on your pass, your favourite perk categories, or survey, contest or referral responses. We'll only collect these if you choose to provide them, and we'll tell you why at the time. If a perk ever needs proof of age, the partner checks your ID in person. We don't collect or store it.

Payment information

Payments are processed by Stripe. We never see or store your full card number, expiry date or security code. Stripe gives us limited details, such as your card brand, the last four digits, your billing country and your payment status.

Membership pass information

When you join, we create your digital pass through PassKit. The pass record contains your name, email address, a unique member ID and your Stripe customer ID.

Redemption and scan information

Each time your pass is scanned at a partner, we record:

  • which partner and location scanned it

  • the date and time

  • your member ID

  • the perk redeemed, and how many times you've redeemed it

We use this to run the program, apply usage limits, verify memberships, prevent misuse and give partners reports.

We do not track your phone's location. We only record the location of the partner where a scan happens.

Website information

When you visit our website, we automatically collect standard technical information, such as your IP address, browser and device type, pages viewed, referring website and time on site. This is collected through Squarespace Analytics, Google Analytics, the Meta (Facebook) Pixel, and Google reCAPTCHA (which protects our forms from spam).

2. How we use your information

We use personal information to:

  • create and manage your membership

  • issue, update and deactivate your pass

  • process payments and handle failed payments

  • verify your membership when you redeem a perk

  • tell waitlist members when we launch

  • respond to questions and give support

  • detect, prevent and investigate fraud or pass misuse

  • understand how our website and program are used, and improve them

  • send service messages about your membership, billing or pass

  • send promotional emails, only with your consent (section 6)

  • meet our legal, tax and accounting obligations

We only use your information for these purposes, or for a new purpose we tell you about and, where required, get your consent for.

3. What partner businesses can see

This is important, so we want to be clear about it.

When a partner scans your pass, they can see your name and member ID, so they can confirm the pass is yours. They don't see your email address, payment details or where else you've used your pass.

We may also give each partner reports about redemptions at their own business, such as how many perks were redeemed and when. Where we can, we give these reports in summary form that doesn't identify you. A partner never sees your redemptions at other businesses.

Our partner agreement requires partners to use member information only to verify and record perk redemptions. They may not copy it, sell it, share it, or use it to market to you. If you choose to give a partner your details directly, for example by joining their mailing list, their own privacy policy applies to that.

If you'd rather a partner didn't see your name, you can choose not to redeem a perk at that business.

4. Service providers we use

We use these providers to run onekelowna. Each one gets only the information it needs to do its job and is required to protect it.

ProviderPurposeInformation involvedStripePayments and subscription billingName, email, billing details, payment statusPassKitIssuing and managing passes, recording scansName, email, member ID, Stripe customer ID, scan recordsZapierConnecting Stripe and PassKit automaticallyName, email, customer and subscription IDsSquarespaceWebsite, forms, waitlist emails and site analyticsEmail, form submissions, technical and usage dataGoogle WorkspaceBusiness email and file storageEmails and any information you send usGoogle AnalyticsWebsite usage analyticsTechnical and usage data, online identifiersGoogle reCAPTCHASpam protection on formsTechnical data, online identifiersMeta (Facebook) PixelMeasuring our ads and building ad audiencesTechnical and usage data, online identifiers

We may change providers or add new ones, including software tools that help us run the business. If we do, the same protections apply and we'll update this list.

We may also disclose information where required or permitted by law, such as in response to a valid legal order, to protect someone's safety, to investigate fraud, or as part of selling, merging or incorporating the business. In that last case, the new owner must handle your information under this policy.

We do not sell your personal information. We don't upload member or waitlist email lists to advertising platforms without your express consent.

5. Storage outside Canada

Several of our providers store and process information on servers outside Canada, mainly in the United States, and sometimes in other countries where they operate. While it's there, it's subject to the laws of those countries, which may allow courts, law enforcement and government authorities to access it. Questions about how our providers handle information outside Canada can be sent to our Privacy Officer.

6. Emails and marketing

Service messages. We'll email you about your membership, billing, pass and these policies. You can't unsubscribe from these while you're a member, because they're needed to run your membership.

Promotional emails. We only send promotional emails, such as news about partners and perks, if you've agreed to receive them, or where Canada's Anti-Spam Legislation (CASL) otherwise allows. Joining the waitlist means you've agreed to launch news and updates about onekelowna.

Every promotional email identifies us, includes our mailing address, and has an unsubscribe link. You can also unsubscribe by emailing hello@onekelowna.com. We'll process your request within 10 business days.

7. Cookies and tracking

Our website uses:

  • Essential cookies, needed for the site, forms and checkout to work

  • Analytics cookies (Squarespace Analytics, Google Analytics), to understand how visitors use the site

  • Advertising cookies (Meta Pixel), to measure our ads and show ads to people who've visited our site

When you first visit, our cookie banner lets you accept or decline non-essential cookies. You can also block cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage ad preferences in your Meta account. Blocking essential cookies may stop parts of the site from working.

8. How long we keep information

InformationHow long we keep itWaitlist emailUntil you unsubscribe, or 12 months after launch if you don't become a member, whichever comes firstPass record (PassKit)Deleted when your membership endsMembership record (name, email, member and customer IDs)Up to 24 months after your membership ends, for support, fraud prevention and legal requirementsRedemption and scan historyUp to 24 months, then deleted or made anonymous. Anonymous totals may be kept for reporting.Billing and tax recordsAt least 6 years, as required by Canadian tax lawSupport emailsUp to 24 months after your question is resolvedWebsite analyticsAccording to the settings of Squarespace, Google and Meta

If we use your information to make a decision that directly affects you, such as ending a membership for misuse, we keep it for at least one year afterward, as BC law requires. When we no longer need information, we delete it securely or make it anonymous.

9. Your rights

You have the right to:

  • ask what personal information we hold about you, and get a copy

  • ask us to correct information that's wrong or incomplete

  • ask us to delete your information, where we don't need to keep it for legal or business reasons

  • withdraw your consent, subject to legal or contractual limits

  • ask questions or make a complaint about how we handle your information

To make a request, email our Privacy Officer at hello@onekelowna.com. We'll respond within 30 days, or tell you if we need more time, as the law allows. We may need to confirm your identity first. Access requests are free in most cases. If a request would take a lot of work, we'll tell you about any minimal fee before we start.

Withdrawing consent for essential processing, such as billing or issuing your pass, means we can no longer provide your membership, and it will end.

If you're not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca), or, for information that crosses provincial or national borders, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

10. Security and privacy breaches

We take reasonable steps to protect your information, including:

  • using established providers such as Stripe and PassKit

  • using encrypted connections on our website and checkout

  • using two-factor authentication on our business accounts

  • limiting access to member data to people who need it

No system is completely secure, and we can't guarantee absolute security.

If a privacy breach happens that creates a real risk of significant harm to you, we'll notify you and the relevant privacy authorities as soon as possible, as the law requires. We keep a record of all privacy breaches.

11. Age

You must be 19 or older to buy a membership. We don't knowingly collect personal information from anyone under 19 for a membership. Our waitlist is intended for people 19 and older. If you believe someone under 19 has given us personal information, contact hello@onekelowna.com and we'll delete it.

12. Changes to this policy

We may update this policy, for example when we add features or providers, or when the law changes. We'll update the "Last updated" date at the top. If we make a significant change to how we handle your information, we'll email members and post a notice on our website before it takes effect, and we'll ask for your consent where the law requires it.

13. Contact us

Privacy Officer ONEKELOWNA hello@onekelowna.com

We're responsible for the personal information described in this policy.