PRIVACY POLICY AND DATA PROTECTION STATEMENT

Effective Date: January 24, 2026

Governing Legislation: Personal Information Protection Act (Alberta) (“PIPA”)

1. OUR COMMITMENT

Bliss Sauna Inc. (“we,” “us,” “the Operator”) is committed to safeguarding the personal information entrusted to us by our renters and website visitors. We manage your personal information in accordance with Alberta’s Personal Information Protection Act (PIPA) and other applicable laws. This policy outlines the principles and practices we follow in protecting your personal information.

2. WHAT PERSONAL INFORMATION DO WE COLLECT?

We collect only the personal information that is reasonably necessary for the purposes of providing our rental services. This typically includes:

• Contact Information: Name, residential address (delivery site), telephone number, and email address.
• Transactional Data: Rental dates, package preferences, and payment history.
• Financial Information: Credit card details used for processing payments and securing the Security Deposit. (Note: We utilize secure third-party payment gateways and do not store full credit card numbers on our local servers).
• Verification Data: Government-issued identification details (restricted, see Section 4).
• Digital Identifiers: IP addresses, browser type, and tracking pixel data (see Section 7).

3. PURPOSE OF COLLECTION

We collect, use, and disclose your personal information for the following specific purposes:

1. To verify your identity and eligibility to enter into a high-value equipment rental contract.
2. To process payments and secure the mandatory Security Deposit.
3. To deliver, set up, and retrieve the mobile sauna unit at your specified location.
4. To protect our assets from theft, fraud, unauthorized use, or damage.
5. To enforce the terms of the Rental Agreement, including debt collection or insurance claims in the event of a breach.
6. To meet regulatory requirements under the Consumer Protection Act.

4. IDENTITY VERIFICATION PROTOCOL (“VIEW AND VERIFY”)

Due to the high value of our mobile sauna units (approx. value $30,000+), we require identity verification to prevent theft (conversion) and fraud.

• Requirement: Upon delivery or booking, we may request to see a valid Government-Issued Photo ID (e.g., Driver’s License) to confirm that the individual receiving the unit matches the Renter on the contract.
• Data Minimization: We adhere to a “View and Verify” policy. We will visually inspect the ID to confirm the name and address. We do not retain photocopies or digital images of your ID unless a specific security risk is identified or an active insurance claim/police investigation is initiated.
• Consent: By booking a rental, you explicitly consent to this verification process as a condition of service.

5. CONSENT

We obtain your consent to collect, use, or disclose your personal information. In most cases, we will ask for your consent explicitly (e.g., checking a box on the booking form). In other cases, consent is implied when you provide information for a specific purpose (e.g., providing an address for delivery implies consent for us to use that address for logistics).

You may withdraw consent at any time, subject to legal or contractual restrictions (e.g., you cannot withdraw consent for us to use your data to process a damage claim while a rental is active).

6. DISCLOSURE TO THIRD PARTIES

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Disclosure is limited to:

• Service Providers: Subcontractors who assist with delivery, payment processing (e.g., Stripe/Square), or IT support. These providers are contractually bound to protect your information.
• Legal & Debt Recovery: Collection agencies, insurers, or legal counsel, solely for the purpose of debt recovery, insurance claims, or enforcing the Rental Agreement.
• Law Enforcement: As required by law or to report theft/fraud.

7. COOKIES AND TRACKING PIXELS

Our website uses standard cookies and tracking pixels (including the Meta/Facebook Pixel) to analyze traffic and improve user experience.

• Analytics: We use tools to measure website usage. This data is aggregated and non-identifiable.
• Retargeting: We may use tracking pixels to serve relevant ads to you on third-party platforms (e.g., Instagram, Facebook) based on your interest in our services.
• Opt-Out: You can opt-out of this tracking through your browser settings or via the Digital Advertising Alliance of Canada’s opt-out tool. By continuing to use our site without changing your settings, you consent to the use of these cookies.

8. ACCESS AND CORRECTION

Under PIPA, you have the right to access your personal information held by us and to request corrections if you believe it is inaccurate.

• Request Process: Requests must be made in writing to our Privacy Officer.
• Response: We will respond within 45 days. We may charge a reasonable fee for providing access, as permitted by PIPA.

9. CONTACT INFORMATION

For any questions regarding this policy or to access your information, please contact our designated Privacy Officer: