Tripshepherd Privacy Policy

Tripshepherd values your privacy. This Privacy Policy explains how we collect, use, share, protect, and retain personal information when you use the Tripshepherd website, mobile application, and related services, including when you browse experiences, create an account, book or provide an experience, communicate through the platform, or use features that rely on real-time location.

This Privacy Policy is intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial privacy laws, where applicable. Additional terms may apply to users located in the United States, as set out in the "Additional Notice for U.S. Users" below.

1. Who this Policy Applies To

This Policy applies to individuals who use Tripshepherd as:

• visitors to our website;
• travelers or guests browsing or booking experiences;
• hosts, guides, or experience providers;
• creators or other users who upload content to the platform; and
• people who contact us or otherwise interact with Tripshepherd.

2. What Personal Information We Collect

We collect personal information that is reasonably necessary for Tripshepherd to operate the platform, deliver experiences, support users, and protect the security of the service.

A. Information you provide directly

Depending on how you use Tripshepherd, this may include:

• name;
• email address;
• phone number;
• account login details;
• profile photo or other profile media;
• billing and payment details;
• booking details;
• communications you send to us or through the platform;
• reviews, ratings, comments, and other user content;
• information submitted by hosts, guides, or creators, including business or payout details, identification details, licensing or insurance information, where required.

B. Information collected automatically

When you use our website or app, we may automatically collect:

• device type and operating system;
• IP address;
• browser type;
• app and website usage information;
• log data, diagnostic data, and crash reports;
• cookie and analytics information;
• approximate or precise location data, where enabled.

C. Information from other sources

We may receive information from:

• payment processors;
• identity verification providers;
• analytics and hosting providers;
• customer support tools;
• marketing and advertising partners;
• other users, where relevant to a booking, support issue, or safety concern.

3. Location Sharing and ETA Functionality

Because Tripshepherd includes pickup, arrival coordination, and live ETA-related features, location data is an important part of the service. We collect precise location data only with your device permissions and, where required by law, your express consent.

For travelers / customers

If you enable location permissions, we may collect your precise location in the app to:

• help confirm your pickup point or meeting point;
• support live ETA and arrival coordination;
• help your host or guide find you more accurately;
• improve the safety and reliability of the experience.

Where a booking involves pickup, meeting, or live coordination, your location may be shared with the relevant host or guide only to the extent reasonably necessary to provide the service.

For guides / hosts

If you are a guide or host using the app for active experience delivery, we may collect and process your precise location to:

• provide ETA and live arrival information to booked customers;
• support pickup and meeting-point coordination;
• facilitate service delivery and operational support;
• help resolve service or safety issues.

Where relevant to an active booking, a customer may be shown the host's or guide's real-time or near real-time location for ETA and coordination purposes.

How long location sharing lasts

We aim to limit precise location collection and sharing to what is reasonably necessary for the relevant feature, such as an active booking, pickup window, or live experience coordination. We do not use precise location information for unrelated purposes without further notice and, where required, consent.

Your choices

You can usually manage location permissions in your device settings. If you disable location sharing, some features, including pickup support, ETA tracking, and real-time coordination, may not function properly.

4. How We Use Personal Information

We use personal information to:

• create and manage user accounts;
• process bookings and payments;
• operate and improve the Tripshepherd platform;
• enable travelers, hosts, guides, and creators to interact through the platform;
• provide customer support;
• coordinate pickups, meeting points, and ETAs;
• verify users and maintain platform integrity;
• detect, investigate, and prevent fraud, abuse, or unsafe activity;
• send service-related communications;
• send marketing communications where permitted by law or where you have consented;
• comply with legal, regulatory, tax, accounting, and contractual obligations;
• enforce our terms and protect our rights and the rights of others.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances.

5. When We Share Personal Information

We do not sell personal information.

We may share personal information in the following circumstances:

A. Between users where necessary for the booking

To enable experiences, pickups, and coordination, we may share limited information between travelers and hosts/guides, such as:

• first name;
• profile image;
• booking details;
• pickup or meeting point details;
• ETA-related location information during an active booking;
• limited contact functionality through the platform.

We aim to share only what is reasonably necessary for the experience.

B. With service providers

We may share personal information with trusted service providers that help us operate the platform, including providers of:

• cloud hosting;
• payment processing;
• customer support;
• communications and notifications;
• identity verification;
• analytics;
• fraud prevention;
• technical infrastructure and security services.

These providers are required to protect personal information and use it only for authorized purposes.

C. For legal and safety reasons

We may disclose personal information where required or permitted by law, including to:

• comply with a subpoena, court order, or legal process;
• respond to lawful requests from regulators or government authorities;
• investigate fraud, safety incidents, or violations of our terms;
• protect the rights, property, safety, or security of Tripshepherd, our users, or others.

D. Business transactions

If all or part of our business is involved in a merger, acquisition, financing, reorganization, or sale, personal information may be disclosed as part of that process, subject to appropriate protections.

6. Cookies, Analytics, and Similar Technologies

Tripshepherd may use cookies, pixels, SDKs, analytics tools, and similar technologies to:

• keep the website and app functioning;
• remember preferences;
• understand how users interact with our services;
• improve performance and user experience;
• measure the effectiveness of content or marketing.

You can manage cookies through your browser settings. Some site features may not work properly if certain cookies are disabled. Some browsers offer a "Do Not Track" setting. At this time, our website may not respond to Do Not Track signals in a standardized way. Where third-party analytics, pixels, or similar tools are used, those providers may collect information in accordance with their own privacy practices.

7. Personal Information Security

Protecting personal information is a priority for Tripshepherd.

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, modification, or destruction.

These safeguards include, where appropriate:

• role-based access restrictions;
• authentication and access controls;
• secure hosting environments;
• logging and monitoring;
• vendor security reviews;
• internal confidentiality obligations;
• secure disposal practices.

If a privacy breach occurs involving personal information under our control, we will respond in accordance with applicable law, including notification, reporting, and record-keeping obligations where required.

8. Data Encryption

Tripshepherd places special importance on the protection of sensitive and identifiable data.

We use industry-standard safeguards, including encryption in transit and, where technically supported and appropriate, encryption at rest for personal information stored digitally by us or our service providers, including personal information such as:

• name;
• email address;
• phone number;
• profile media and profile images;
• account credentials;
• location data;
• payment-related information;
• communications sent through the platform.

9. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to:

• maintain your account;
• deliver services and support bookings;
• comply with legal, tax, accounting, insurance, and regulatory requirements;
• resolve disputes;
• enforce agreements;
• maintain security and fraud prevention records.

When personal information is no longer required, we delete it, anonymize it, or securely destroy it, subject to legal retention requirements.

10. International Processing

Tripshepherd and its service providers may process or store personal information in Canada, the United States, or other jurisdictions where we or our service providers operate.

As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in accordance with local law.

Where personal information is transferred across borders, we use contractual and other reasonable safeguards designed to protect it.

Where personal information is processed by service providers on our behalf, we require them to protect the information appropriately and handle it only for authorized purposes.

11. Your Privacy Choices and Rights

Subject to applicable law, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• withdraw consent, where processing is based on consent, subject to legal or contractual restrictions;
• request deletion of personal information where required by applicable law and subject to legal or operational retention requirements;
• opt out of marketing communications;
• manage location permissions through your device settings;
• ask questions about how your personal information is handled.

To exercise a privacy request, please contact us using the details below. We may need to verify your identity before responding.

12. Children

Tripshepherd is not intended for children to use independently where they are below the age of majority in their jurisdiction and is not directed to children under 13. We do not knowingly collect personal information directly from children except where it is provided by a parent, guardian, or authorized adult in connection with a booking or participation in an experience.

13. Third-Party Links and Services

Tripshepherd may contain links to third-party sites, apps, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information to them.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or privacy practices. When we do, we will post the updated version and revise the "Last Updated" date. Where required by law, we will provide additional notice.

15. Contact Us

If you have questions, concerns, or a privacy request, please contact:

Privacy Officer — Tripshepherd

• Email: info@tripshepherd.com
• Phone: 1-888-961-6584

Mailing addresses:

• Canada: 5400 Robinson St, Niagara Falls, ON L2G 2A6
• United States: 310 Pine Ave, Niagara Falls, NY 14301, United States

---

Additional Notice for U.S. Users

If you are located in the United States, additional privacy rights or disclosures may apply to you depending on the state in which you reside and the nature of your interaction with Tripshepherd. This Additional Notice supplements, and does not replace, the rest of this Privacy Policy.

These rights may include, where required by applicable law, the right to request access to certain personal information, request correction or deletion, and opt out of certain types of data sharing or targeted advertising. U.S. state privacy obligations are fragmented and often depend on the business's thresholds, practices, and the user's state of residence.

Tripshepherd does not sell personal information for monetary consideration. However, if our use of cookies, analytics tools, pixels, or similar technologies is considered "sharing," "targeted advertising," or a similar regulated activity under applicable U.S. state law, U.S. users may have the right to opt out where required by law. California law, in particular, uses broad concepts of "sale" and "sharing" in some contexts.

Tripshepherd may collect precise location information only with your device permissions and, where required by law, your consent.

If you are a U.S. user and have questions about your privacy rights, or would like to make a privacy request, please contact us at info@tripshepherd.com with the subject line "U.S. Privacy Request."