Maza Hobbies Privacy Policy

1. Who we are

Maza Hobbies Inc.
Email: hello@mazahobbies.com
Business address: 2967 Dundas St. W. #708D, Toronto, ON M6P 1Z2, Canada

2. Personal information we collect

The categories of information we collect depend on how you interact with us. They may include:

2.1 Account and profile

If you create an account or use the passport experience, we may collect:

• name and email address;
• city or region and hobby interests;
• onboarding or preference responses;
• username or display name where you choose to provide one; and
• authentication-related data managed by our identity providers.

2.2 Purchases and the Hobby Hop Passport

When you purchase a Hobby Hop Passport or related offers, we may collect:

• order details (product, city, season, price, currency, taxes where applicable);
• billing contact information;
• payment information processed by our payment processor (currently Stripe) — we do not store your full payment card number on our servers; and
• limited attribution or referral data you provide (for example a referral or campaign code).

2.3 Passport activity, rewards, and partner features

To operate the Hobby Hop Passport, we may collect:

• check-in or QR code activity, timestamps, and related studio or location context as described in the Services;
• points, badges, levels, rewards, and prize draw or promotion participation;
• referral activity where referral features are available; and
• partner offer views, claims, or redemptions as implemented in the product.

2.4 Communications and support

We may collect:

• email address and message content when you contact us, join a waitlist, subscribe to updates, or reply to our emails;
• feedback, survey responses, or testimonials you choose to send; and
• records needed to handle refunds, access issues, or disputes.

2.5 Marketing site, cookies, and similar technologies

When you browse our marketing website, we and our partners may collect:

• First-party cookies used to remember preferences (for example city selection), assign a pseudonymous visitor identifier where we use one, support product experiments, or maintain session-related functionality;
• Analytics and marketing data through tools such as Google Tag Manager and related tags (for example measurement of page views, events, and conversions) — configured based on our setup at the time you use the site;
• Security and abuse-prevention signals, including tokens or metadata from Cloudflare Turnstile or similar services when those features are enabled; and
• technical data such as IP address, device or browser type, general location derived from IP, and referring URLs.

2.6 User content

If you submit reviews, photos, videos, comments, social content, or other materials, we collect that content as described in the Terms of Service (including optional tagging or permissions you give us).

2.7 Information we do not intend to collect

The Hobby Hop Passport is intended for users who meet the eligibility requirements in our Terms of Service. We do not knowingly collect personal information from children for passport purchases. If you believe we have collected information from a child inappropriately, please contact us and we will take appropriate steps.

3. How we use personal information

We use personal information to:

• provide, operate, and improve the Services, including accounts, passport access, and partner listings;
• process payments and fulfill purchases;
• operate rewards, points, check-ins, referrals, and promotions in line with our Terms of Service;
• communicate with you about your account, purchases, season updates, rewards, partner offers, and service messages;
• send marketing communications where permitted by law (see Section 8);
• detect, prevent, and investigate fraud, abuse, or security issues;
• measure interest in our Services, run experiments, and understand how our marketing pages perform;
• comply with law, respond to lawful requests, and protect our rights; and
• aggregate or de-identify information where appropriate for analytics or reporting.

4. Legal bases and consent

Where PIPEDA applies, we generally rely on consent and/or appropriate purposes that a reasonable person would consider appropriate in the circumstances — for example providing a product you requested, security, or legal compliance.

You may withdraw consent where withdrawal does not prevent us from using information for purposes that do not require consent, or where we have another valid legal basis. Withdrawing consent may limit certain features (for example marketing emails or optional analytics where you exercise available controls).

5. When we share personal information

We may share personal information with:

• Service providers and processors who assist us — such as payment processing (for example Stripe), cloud hosting, email delivery, customer support tools, analytics, content or CMS providers, database or authentication providers, and security or fraud-prevention services. They may only use the information as instructed by us and for the purpose of providing their services.
• Studios and partners where needed to deliver passport benefits you choose to use (for example confirming eligibility for an offer), subject to the partner's own policies when you interact with them directly.
• Professional advisors (lawyers, accountants) where required.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards.
• Law and safety — when we believe disclosure is required by law, regulation, legal process, or to protect the rights, safety, or property of Maza Hobbies, our users, or others.

Some service providers may process or store information outside Canada (for example in the United States). Where that happens, we take steps appropriate to the sensitivity of the information, including contractual measures where available. Cross-border transfers may be subject to the laws of the destination country.

6. Cookies and your choices

You can control cookies through your browser settings (for example blocking or deleting cookies). If you disable certain cookies, parts of the Services may not work as intended.

Where required by law, we will obtain consent before using non-essential cookies or similar technologies, or provide a way to manage preferences. Because our analytics stack may be configured in Google Tag Manager, the specific tags in use can change; you may also use industry opt-out tools offered by analytics or advertising providers where available.

7. Retention

We retain personal information for as long as needed to provide the Services, fulfill the purposes described in this policy, meet legal, accounting, or reporting requirements, and resolve disputes. Retention periods can vary depending on the type of data and whether you still have an active relationship with us.

8. Marketing communications (including CASL)

We may send promotional or marketing emails when permitted by applicable law, including Canada's anti-spam legislation (CASL) where it applies. You can unsubscribe from marketing messages using the link in our emails or by contacting us at hello@mazahobbies.com.

We may still send transactional or service-related messages about your account, purchases, passport, security, or policy updates even if you opt out of marketing.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Your rights and choices

Depending on applicable law, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion or anonymization in certain circumstances;
• withdraw or vary consent where processing is based on consent; and
• lodge a concern with a privacy regulator.

To make a request, email hello@mazahobbies.com. We may need to verify your identity before responding. We will respond within a reasonable time frame as required by applicable law.

11. Third-party sites and services

The Services may link to studio websites, booking platforms, social media, maps, or other third parties. Their privacy practices are governed by their own policies. We encourage you to read those policies before providing personal information to them.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above. If changes are material, we may provide additional notice (for example by email or through the Services). Your continued use of the Services after the effective date means you accept the updated policy, subject to any non-waivable rights you have under applicable law.

13. Contact us

Questions about this Privacy Policy or our privacy practices: hello@mazahobbies.com