Privacy Policy

Policy Purpose

Castle Mountain Resort (“we,” “our,” or “us”) is committed to protecting the privacy and personal information of our customers, employees, and other stakeholders. This Privacy Policy outlines how we collect, use, disclose, and protect personal information. It is in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Protection Act (PIPA) in Alberta.

Scope

This Privacy Policy informs everyone of Castle Mountain Resort’s commitment to privacy and establishes the methods by which privacy is ensured. This Privacy Policy applies to all personal information within Castle Mountain Resort’s possession and control. This policy applies to the collection, use, and disclosure of personal information in the course of our commercial activities within Alberta, Canada.

Personal information refers to any information about an identifiable individual, excluding business contact information used solely for business purposes.

Business information refers to any information related to an organization or business entity that is used for business operations. This includes, but is not limited to, business names, addresses, contact details, and financial data, provided it does not identify an individual. Business information is treated and handled with the same level of confidentiality, privacy, and respect as personal information.

Policy Elements

Collection of Personal Information

We collect personal information in the following ways:

Directly from the customer interactions (e.g., filling out forms, creating accounts, or making inquiries).
Automatically through the use of our website or other digital platforms (e.g., IP addresses, cookies).
During employment processes, including the collection of information for payroll and related purposes.
To communicate and facilitate medical and safety requirements, such as documenting injuries or addressing emergencies (e.g., when someone is hurt).

The types of personal information we may collect include, but are not limited to:

Name
Contact information (e.g., address, phone number, email)
Financial information (e.g., payment details)
Employment-related information (e.g., resumes, SINs, references)
Medical collection (eg: type of injury)

Purpose of Collection

We collect personal information for the following purposes:

To provide and improve our products and services.
To process payments and fulfill orders.
To communicate with customers regarding inquiries, orders, or customer service.
To ensure health, safety, and medical compliance in the workplace or during emergencies.
To meet legal and regulatory requirements.
To assess and manage employment applications.
To administer a contest, promotion, survey, marketing, or other web related feature.
To use information in the aggregate to understand how our Users as a group use the services and resources (eg: website).

We will only collect personal information necessary for these purposes.

Consent

We obtain consent to collect, use, or disclose personal information, except where otherwise permitted or required by law. Consent may be obtained in various forms, including:

Explicit consent (e.g., written or verbal agreements).
Implied consent (e.g., through your continued use of our services, signing forms or filling out information).

An individual may withdraw their consent at any time, subject to legal or contractual restrictions. To withdraw consent, contact us using the information provided below.

Use and Disclosure of Personal Information

We use and disclose personal information only for the purposes identified at the time of collection or as required by law. We will also consider that disclosing personal information in an appropriate, responsible, and ethical manner is fundamental to Castle Mountain Resort’s daily operations. Personal information may be shared with:

Service providers who assist us in delivering services (e.g., payment processors, IT providers).
Regulatory authorities, if required to comply with legal obligations (eg: CRA).

Castle Mountain Resort will obtain individual consent if personal information is to be used for any other purpose. Castle Mountain Resort will not use that information without the consent of the individual.

Under no circumstances will Castle Mountain Resort sell, rent, distribute, or otherwise disclose personal information or contact lists to third parties. However, limited disclosure may be required as part of Castle Mountain Resort fulfilling its stated business duties and day-to-day operations. This may include consultants, suppliers, or business partners of Castle Mountain Resort but only with the understanding that these parties obey and abide by this Privacy Policy, to the extent necessary to fulfill their own business duties and day-to-day operations.

Safeguards

Castle Mountain Resort strives to protect and respect the personal information of its customers, employees, business partners, and so on, in accordance with all applicable regional and federal laws. We take reasonable precautions to protect personal information from loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include:

Physical safeguards (e.g., locked filing cabinets).
Technical safeguards (e.g., encryption, firewalls).
Organizational safeguards (e.g., employee training, restricted access).

Website Policy Disclosure

Castle Mountain Resort’s website will include our privacy policy and disclose our personal information practices. Individuals inputting data into the website will be notified of:

Personally identifiable information about the individual that is collected from the website or through affiliate sites.
Information about the organization collecting the data.
How the data will be used.
With whom the data may or may not be disclosed.
What options are available to the individual regarding the collection, use, and disclosure of personal information?
The information technology security procedures in place that protect against the destruction, loss, theft, alteration, or misuse of personal information under Castle Mountain Resort possession and control.
How the individual may access and correct any inaccuracies in their personal information.
Castle Mountain Resort may share compiled demographic information with its business partners and/or advertisers, but no personal information that can identify any individual person shall be disclosed.
This website may contain links to other sites; Castle Mountain Resort is not responsible for the privacy practices of other organizations’ sites.
While IP addresses are logged in order to administer the site, track visitor movement, and gather demographic information, these IP addresses will not be linked to any personally identifiable information.
Any registration or order form asking site visitors to enter personal or financial information will be protected by SSL encryption.
Site visitors are given the choice to opt out of having their personal information used at the point where the information is gathered. However certain products, such as season passes, do require personal information in order to complete the sale and/or product the service.

Retention of Personal Information

CMR retains personal information only as long as necessary to fulfill the identified purposes or comply with legal requirements. Once no longer needed, personal information is securely destroyed or anonymized.

Access to and Correction of Personal Information

In most instances, an individual has the right to access their personal information and request corrections if it is inaccurate or incomplete. To make a request, an individual must contact us using the information provided below. We may require verification of their identity before providing access. Should Castle Mountain Resort deny an individual’s request for access to their personal information, Castle Mountain Resort will advise in writing of the reason for such a refusal. The individual may then challenge the decision.

Third-Party Websites

CMR’s website may contain links to third-party websites. CMR is not responsible for the privacy practices of these websites and encourage individuals to review their privacy policies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be posted on our website with the effective date.

Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact:

info@skicastle.ca
403-627-5101