Legal
Privacy Policy
How we collect, use, and protect your personal information.
Placeholder notice (v0.1). This page is an honest plain-language description of what we do today. It is not a substitute for a lawyer-reviewed privacy policy, and we will replace this with a finalized PIPEDA-compliant policy before public launch. If anything here matters to you, email
privacy@the6pass.ca.
Effective date: April 2026
Governed by: Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Ontario's provincial privacy laws where applicable.
Who we are
The 6 Pass Inc. ("we," "us," "our") is a Toronto-based company offering a curated lifestyle membership. We operate the6pass.ca and associated services.
What we collect
We collect information you give us directly:
- Waitlist signup: email address, first name (optional), neighbourhood (optional), tier interest (optional), and referral code (if you came through one).
- Merchant inquiries: business name, your name, email, phone, business details, and any notes you include.
- Contact form: name, email, subject, and your message.
- Future member accounts: when we launch paid memberships, we will additionally collect payment information (handled by Stripe), billing address, and redemption history. This policy will be updated before that launch.
We also collect limited technical information automatically:
- Referral source (UTM parameters in URLs) so we know which channels brought you here.
- Basic server logs (IP address, browser type, pages viewed) for security and troubleshooting. These are retained for no more than 90 days.
What we don't collect
We do not use advertising cookies or third-party trackers. We do not sell your data to anyone, ever. We do not follow you across the web.
How we use what we collect
We use your information only to:
- Operate the waitlist and notify you when membership opens.
- Respond to your inquiry (merchant, contact, press).
- Process your membership, redemptions, and billing (once live).
- Send you service-related messages (e.g., "your membership renews next week").
- Understand how the site is being used so we can improve it.
We do not send marketing email without your consent. You can withdraw consent or unsubscribe at any time.
Who we share it with
We share your information only with the third-party service providers we rely on to run the business:
- Supabase (our database and authentication provider — data hosted in Canada, ca-central-1 region).
- Netlify (our website hosting provider).
- Stripe (payment processing — future).
- Email service provider (for transactional email — future).
Each of these providers is contractually bound to handle your data only on our instructions. We do not share your data with merchants on the platform, with advertisers, or with data brokers.
Where your data lives
Our primary database is hosted in Canada (Supabase ca-central-1). Some service providers (e.g., email, Stripe) may process data in the United States. We use providers that meet Canadian privacy standards.
How long we keep it
- Waitlist entries: until you ask us to delete, or until 24 months of inactivity after the membership platform launches.
- Merchant leads: as long as the business relationship exists, plus 12 months after.
- Contact inquiries: 12 months.
- Member records: as long as you have an active account, plus 7 years for tax and accounting obligations after account closure.
Your rights
Under PIPEDA you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate.
- Request deletion of your information, subject to legal retention requirements.
- Withdraw consent for us to process your information (though this may mean we can no longer provide services).
- Complain to the Office of the Privacy Commissioner of Canada if you believe we've mishandled your data.
To exercise any of these rights, email privacy@the6pass.ca. We'll respond within 30 days.
Security
We use industry-standard protections: encrypted connections (HTTPS), Row-Level Security on our database, password hashing, and limited-access admin accounts. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the Privacy Commissioner without undue delay.
Children
The 6 Pass is not directed at people under 18, and we do not knowingly collect information from minors. If you believe we have inadvertently collected data from a minor, contact us and we'll delete it.
Changes to this policy
When we change this policy materially, we'll post the updated version here with a new effective date and, where appropriate, email waitlist subscribers and members about the change.
Contact us
Privacy questions: privacy@the6pass.ca
General: hello@the6pass.ca
Mail: The 6 Pass Inc., Toronto, Ontario, Canada