Privacy
Your privacy, simply.
No jargon, no tricks. Here is what we do with your information, how we protect it and how to exercise your rights.
Our commitments
Clear consent
Separate choices, never pre-ticked, and refusing is as easy as accepting.
Minimal data
We only collect what is needed for the ticket, the payment and the service.
European hosting
Our application and database are hosted in the European Union.
Your rights
Quebec’s Law 25 gives you rights over your personal information. We respond within 30 days.
Portability
Receive your computerised information in a structured, commonly used format.
Exercise my rightsAutomated decision
Get an explanation and a human review when a decision is automated.
Exercise my rightsCookies
Essential cookies run the site. The other categories are off by default and only turn on with your consent.
Essential
Session, cart, security, language and basic preferences.
Comfort
City, market and display preferences.
Analytics
Aggregated statistics, with no advertising profiling.
Marketing
Personalised communications and campaign measurement.
Our processors
These providers process information on our behalf. The applicable contractual and technical safeguards are summarised below; the full list is available from the Privacy Officer.
| Provider | Role | Location | Safeguards |
|---|---|---|---|
| Hetzner | Hosting and storage | Germany (EU) | Encryption, ISO 27001, BSI C5, SSE-C (agreement to confirm) |
| Neon | PostgreSQL database | Frankfurt (EU) | Encryption at rest, restricted access (agreement to confirm) |
| Sentry | Error monitoring | EU / United States | PII scrubbing, no replay (agreement to confirm) |
| Resend | Transactional email | United States | Minimisation, contractual clauses (agreement to confirm) |
| Moneris | Payments | Canada | PCI-DSS, tokenisation (agreement to confirm) |
| Maps and anti-bot | United States | Map and autocomplete loaded after consent, reCAPTCHA for security (agreement to confirm) |
Security
TLS in transit, encryption at rest, application-level encryption of banking data, audit log, role-based access, encrypted backups and regular access reviews.
Privacy officer
Alexan Artun
For any question, request or complaint, write to us. You may also complain to the Commission d’accès à l’information du Québec (CAI).
privacy@epasslive.com5520 Chabot, Suite 204, Montreal, Quebec H2K 2S7