Effective Sept 4, 2026 (see archived version above).

ToursByLocals respects your privacy. This Privacy Policy explains how ToursByLocals Canada Inc. and its affiliates (“ToursByLocals”, “we”, “us” or “our”) collect, use, disclose and otherwise process personal data when you use the ToursByLocals website, applications, marketplace and related services (collectively, the “Services”).

It also explains the choices and rights that may be available to you regarding your personal data.

1. Who is responsible for your personal data

ToursByLocals Canada Inc. is responsible for the personal data processed in connection with the Services, except where otherwise stated.

ToursByLocals Canada Inc.

Suite 250 - #1682, 997 Seymour St.

Vancouver, British Columbia

Canada V6B 3M1

You can contact us regarding privacy matters at support@toursbylocals.com.

2. Personal data we collect

The personal data we collect depends on how you interact with ToursByLocals.

Information you provide to us

We may collect information such as:

• your name, email address, telephone number, address, country of residence, and other contact information;
• account information, credentials, and preferences;
• booking information, tour preferences, meeting locations, and information about tour participants;
• communications through the Services and communications you send to us by email, telephone, live chat, WhatsApp, or other communication channels;
• reviews, photographs, videos, and other content you submit;
• payment, transaction, payout, banking, billing, and tax information;
• responses to surveys, complaints, and other feedback;
• marketing and communication preferences; and
• other information you choose to provide.

If you are a guide, guide applicant, travel agent, affiliate, or other business partner, we may also collect information about your business or professional activities, qualifications, experience, licences or permits, references, identity, screening or verification results, and other information necessary to establish and administer our relationship with you.

Certain information you choose to submit through the Services is intended to be publicly available. For example, guide profiles, tour descriptions, photographs, reviews, and other marketplace content may be displayed publicly through the Services.

You may choose to provide information about dietary, accessibility, or other special requirements relating to you or another tour participant. We use this information only as reasonably necessary to facilitate the requested Services and as otherwise permitted by applicable law.

If you provide personal data about another person, you should only do so where you are authorized to provide that information.

Information collected automatically

When you use the Services, we and our service providers may automatically collect information such as:

• IP address;
• browser, device, and operating system information;
• language and approximate location;
• pages viewed and links clicked;
• referring and exit pages;
• dates and times of visits;
• interactions with and use of the Services; and
• cookies, device identifiers, and similar information.

Information we receive from third parties

We may receive personal data from other users and from third parties that help us provide the Services, such as:

• payment and payout providers;
• identity, verification, screening, fraud-prevention, and compliance providers;
• authentication and sign-in providers;
• customer support and communications providers;
• customer relationship management and marketing providers;
• analytics and advertising providers;
• commercial and distribution partners; and
• other service providers.

We may also receive information from a third-party service that you choose to connect to your ToursByLocals account, as described below.

3. How we use personal data

We may use personal data to:

• create, maintain, authenticate, and secure accounts;
• operate and provide the ToursByLocals marketplace and Services;
• facilitate tour enquiries, bookings, and communications between users;
• create and display guide profiles, tours, availability, reviews, and other marketplace content;
• process payments, refunds, payouts, and other transactions;
• evaluate guide applications and manage relationships with guides, travel agents, affiliates, and other partners;
• provide customer support and respond to questions, complaints, and disputes;
• communicate with you about your account, bookings, transactions, or the Services, including by email, telephone, SMS, WhatsApp, or other communication channels where permitted by applicable law;
• conduct identity verification, screening, fraud prevention, compliance, security, and safety activities;
• monitor and review communications through the Services for customer support, safety, fraud prevention, and compliance with our agreements and policies;
• personalize, maintain, analyze, and improve the Services;
• develop and test new features and functionality;
• send marketing and promotional communications where permitted by law;
• measure the effectiveness of our Services and marketing;
• maintain financial, tax, and business records;
• enforce our agreements and policies;
• protect ToursByLocals, our users, and others; and
• comply with legal, regulatory, tax, and reporting obligations and establish, exercise, or defend legal claims.

Where applicable law requires a legal basis for processing personal data, we rely on one or more of the following depending on the circumstances:

• performance of a contract or steps taken before entering into a contract;
• our legitimate interests, provided those interests are not overridden by your rights and interests. Our legitimate interests may include operating and improving the Services, maintaining security and safety, preventing fraud, managing our business relationships and communicating with users;
• compliance with legal obligations; and
• your consent.

Where we rely on consent, you may withdraw your consent at any time, without affecting processing that occurred before withdrawal.

The purposes listed above apply depending on the type of personal data involved. Where this Privacy Policy describes a more limited purpose for particular data, such as Google user data, that more specific description applies.

4. Connected services and account authentication

Google Calendar

Guides may choose to connect Google Calendar to their ToursByLocals account to synchronize their availability.

When you connect Google Calendar, ToursByLocals accesses the following Google user data: the email address of the connected Google account, the names, identifiers and time zones of the calendars, an encrypted authorization token that lets us keep reading the calendar you selected, and, for each event on that calendar, its start time, end time, whether it marks you busy, and whether it is an all-day event. We use this information only to provide and maintain the Google Calendar synchronization functionality you choose to enable, including reflecting your availability in ToursByLocals and helping prevent scheduling conflicts.

Event titles, descriptions, locations, attendees and any other event content are read only momentarily - to determine whether an event makes you busy - and are never stored, logged, displayed, or shared.

We do not use Google user data for advertising, marketing, profiling unrelated to the Calendar synchronization functionality, determining creditworthiness, or lending purposes. We do not sell Google user data or transfer it to data brokers or information resellers.

We disclose Google user data only to service providers where necessary to operate, maintain, or secure the Calendar synchronization functionality, or where required by applicable law.

We apply the security safeguards described in this Privacy Policy to Google user data, including appropriate technical and organizational measures designed to protect it from unauthorized access, use, disclosure, alteration, or loss.

You may disconnect Google Calendar from your ToursByLocals account at any time, or revoke ToursByLocals' authorization through your Google account. On disconnect we immediately revoke and delete the stored authorization token, stop all syncing, and delete the busy windows the calendar created, so no residual unavailability remains. The same teardown runs automatically if your guide account is inactivated.

We do not use Google Workspace API data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

ToursByLocals' use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Sign-in and authentication services

We may allow you to create, access, or authenticate your ToursByLocals account using a third-party identity or authentication provider.

If you choose to use such a service, we may receive information necessary to authenticate you, such as your name, email address, profile information, or account identifier, depending on the provider and the permissions you authorize.

We use this information to create, authenticate, and secure your ToursByLocals account.

5. Payments, payouts, verification, and fraud prevention

We use third-party providers to facilitate payments, refunds, payouts, identity verification, fraud prevention, screening, and related activities.

Depending on the transaction or service, these providers may collect or process information such as:

• payment card or bank account information;
• billing information;
• transaction information;
• identity and business information;
• tax information;
• device and fraud-prevention information; and
• information required for compliance with legal or regulatory requirements.

Certain information, such as complete payment card credentials, may be collected directly by a payment provider rather than by ToursByLocals.

We may receive information about payments and payouts, including their amount, status, payment method, and transaction identifiers, and use it to administer bookings, transactions, financial reporting, fraud prevention, and compliance.

6. Customer support and communications

When you contact us, we may process your contact information, account and booking information, communications, and any other information reasonably necessary to understand and respond to your request.

We use third-party customer support, communications, and related service providers to help us manage communications and support requests.

Communications may be monitored or recorded where permitted by applicable law and where appropriate notice is provided.

7. Marketing and customer relationship management

We use customer relationship management, communications, and marketing tools to manage our relationships with travellers, guides, travel agencies, prospective users, and other business contacts.

These tools may process information such as your:

• name and contact information;
• account or business relationship;
• booking or transaction history;
• communications and interactions with ToursByLocals;
• marketing preferences; and
• interactions with our emails and other communications.

Where permitted by applicable law, we may use this information to send information about ToursByLocals, tours, promotions, or other content that may be relevant to you.

You may unsubscribe from marketing emails at any time using the unsubscribe link included in the message or through applicable account settings.

Communications that are necessary to administer your account, inquiries, bookings, payments, or other Services are not marketing communications and may continue where necessary.

8. AI-assisted tools and features

ToursByLocals and some of our service providers may use artificial intelligence or machine-learning technologies to support features of the Services and our business operations.

Depending on the use case, these technologies may assist with activities such as:

• creating, editing, translating, or summarizing content;
• providing or supporting customer service;
• organizing or analyzing information;
• improving search, recommendations, or other functionality;
• identifying fraud, misuse, or safety concerns; and
• supporting internal operations and efficiency.

Where an AI-enabled service provider processes personal data on our behalf, we require the provider to process that information in accordance with our instructions, applicable contractual requirements, and applicable data protection laws.

Some content displayed through the Services may be generated or assisted by artificial intelligence and may be identified as such.

9. Cookies, analytics, and advertising

We and our service providers use cookies, pixels, tags, and similar technologies to:

• operate and secure the Services;
• keep users signed in and remember preferences;
• understand how users interact with the Services;
• measure and improve performance;
• analyze traffic and usage; and
• where permitted, deliver or measure advertising and marketing.

These technologies may collect information such as IP address, device and browser information, identifiers, approximate location, pages viewed, links clicked, and interactions with the Services.

Most browsers allow you to manage or block cookies through your browser settings. Blocking certain cookies may affect the functionality of the Services.

10. How we disclose personal data

We may disclose personal data to:

• other users of the Services, where reasonably necessary to facilitate inquiries, bookings, communications, and tours;
• ToursByLocals affiliates, where necessary to operate our business and provide the Services;
• service providers supporting areas such as cloud infrastructure, customer support, communications, CRM, marketing, payments, payouts, screening, fraud prevention, analytics, advertising, security, software, accounting, tax, legal, and other professional services;
• business and distribution partners, where reasonably necessary to provide a requested service, facilitate a booking, distribute ToursByLocals offerings, or administer a business relationship;
• governmental, regulatory, law enforcement, or other parties where reasonably necessary to comply with applicable law, protect rights or safety, investigate misconduct, or establish, exercise, or defend legal claims;
• parties involved in an actual or proposed merger, financing, acquisition, restructuring, sale of assets, insolvency, or similar corporate transaction; and
• other parties where you direct or authorize us to do so.

We do not sell personal data for monetary consideration.

Some privacy laws use broader definitions of “sale” or “sharing,” particularly in connection with online advertising. Where those laws apply, we provide the choices and rights required by applicable law.

11. Data retention and deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide and administer accounts and the Services;
• facilitate bookings, payments, refunds, and payouts;
• provide customer support;
• maintain transaction, tax, accounting, and business records;
• prevent fraud and maintain safety and security;
• comply with legal and regulatory obligations;
• resolve disputes; and
• establish, exercise, or defend legal claims.

Retention periods vary depending on the nature of the information, our relationship with you, applicable legal requirements, and whether the information is needed for security, fraud prevention, or dispute resolution.

When personal data is no longer reasonably required, we delete or de-identify it in accordance with our retention practices.

You may also request deletion of your personal data as described below, subject to applicable exceptions.

Additional retention and deletion information applicable to Google Calendar data is provided in the Google Calendar section above.

12. International processing

ToursByLocals operates internationally, and our affiliates and service providers may be located in countries other than the country where you live. As a result, your personal data may be processed in countries other than the country where you live, including countries where ToursByLocals, its affiliates, or its service providers operate.

Privacy and data protection laws in those countries may differ from those in your country of residence. You may contact us at support@toursbylocals.com for more information about how your personal data is processed internationally.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or misuse.

These measures may include access controls, authentication mechanisms, encryption, monitoring, and other safeguards appropriate to the nature of the information and associated risks.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and should contact us if you believe your account has been accessed without authorization.

14. Your privacy rights and choices

Depending on where you live, applicable law may give you rights regarding your personal data, including the right to:

• access personal data we hold about you;
• correct inaccurate or incomplete personal data;
• request deletion of personal data;
• obtain a portable copy of certain personal data; and
• withdraw consent where processing is based on consent.

These rights are subject to applicable legal requirements and exceptions.

You may also:

• update certain information through your ToursByLocals account;
• unsubscribe from marketing communications; and
• disconnect or revoke authorization for third-party services connected to your account.

To exercise a privacy right, contact us at support@toursbylocals.com.

We may request information reasonably necessary to verify your identity before processing your request.

15. Additional information for California residents

If you are a California resident, the California Consumer Privacy Act, as amended (“CCPA”), may provide you with additional rights regarding your personal information.

Personal information collected

During the preceding 12 months, ToursByLocals may have collected the following categories of personal information, as defined by the CCPA:

• Identifiers, such as your name, email address, telephone number, postal address, account identifier, IP address and similar identifiers;
• Personal information described in California Civil Code section 1798.80, such as contact, financial, payment and account information;
• Characteristics of protected classifications, such as age, nationality or other information you choose to provide;
• Commercial information, such as booking, purchase, payment and transaction history;
• Internet or other electronic network activity information, such as browsing, device and interaction information;
• Geolocation information, such as approximate location and locations you provide in connection with a tour or booking;
• Audio, electronic, visual or similar information, such as photographs, videos and communications;
• Professional or employment-related information, particularly in connection with guides, guide applicants and business partners;
• Inferences, such as preferences or interests derived from information we collect; and
• Sensitive personal information, such as accessibility information you choose to provide that may reveal health or other sensitive information.

We collect these categories of information from the sources described in Section “Personal data we collect”, and use them for the purposes described in Section “How we use personal data”.

We may disclose these categories of personal information to the categories of recipients described in Section “How we disclose personal data” for the business purposes described in this Privacy Policy.

Sale and sharing of personal information

ToursByLocals does not sell personal information for monetary consideration. However, during the preceding 12 months, we may have “shared,” as that term is defined by the CCPA, identifiers and internet or electronic network activity information with advertising and analytics partners for cross-context behavioral advertising. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

Your California privacy rights

California residents may have the right to:

• Know the categories and specific pieces of personal information we have collected about them, the categories of sources, the purposes for collecting, using, selling or sharing the information, and the categories of third parties to whom it is disclosed;
• Delete personal information we collected from them, subject to applicable exceptions;
• Correct inaccurate personal information we maintain about them;
• Opt out of the sale or sharing of personal information, if applicable;
• Limit certain uses and disclosures of sensitive personal information, if applicable; and
• Not be discriminated or retaliated against for exercising rights under the CCPA.

Exercising California privacy rights

You may submit a request to know, delete or correct your personal information by contacting us at support@toursbylocals.com.

We may request information reasonably necessary to verify your identity and the request. Information provided for verification will be used only for verification and responding to the request.

Opt-out rights

You may opt out of the sale or sharing of your personal information by contacting us at support@toursbylocals.com.

16. Third-party websites and services

The Services may contain links to or integrate with websites, applications, and services operated by third parties.

This Privacy Policy does not govern the privacy practices of third parties acting independently of ToursByLocals. We encourage you to review their privacy notices before providing information to them.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices, or legal requirements, by posting the updated version on the Site.

The effective date at the top of this Privacy Policy indicates when the current version became effective.

18. Contact us

For questions about this Privacy Policy, how we handle personal data, or your privacy rights, please contact:

ToursByLocals Canada Inc.

Suite 250 - #1682, 997 Seymour St.

Vancouver, British Columbia

Canada V6B 3M1

Email: support@toursbylocals.com