Your Privacy Matters
LoyalVale Inc. ("we," "us," "our") operates worldcupvisa.ca. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), the EU General Data Protection Regulation (GDPR), and other applicable laws.
1. Who We Are
LoyalVale Inc. is an independent travel information and e-commerce brand operating the website worldcupvisa.ca. We provide travel guides, visa information, and fan merchandise related to the FIFA World Cup 2026 in Canada.
We are not affiliated with the Government of Canada, Immigration, Refugees and Citizenship Canada (IRCC), or FIFA.
Privacy Officer Contact:
LoyalVale Inc. Privacy Officer
Email: [email protected]
Website: worldcupvisa.ca
2. Personal Information We Collect
We collect only the information necessary to provide our services and improve your experience:
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | Newsletter, merch launch notifications, waitlist | Express consent (CASL/GDPR) |
| Country of residence | Relevant visa info, shipping planning | Consent |
| Clothing size preference | Merchandise planning and inventory | Consent |
| IP address | Security, rate limiting, fraud prevention | Legitimate interest |
| User agent string | Technical troubleshooting, site optimization | Legitimate interest |
| localStorage data | World Cup Readiness Tracker progress | Legitimate interest / consent (EU) |
3. How We Collect Your Information
- Directly from you — when you subscribe to our newsletter, join the shop waitlist, or contact us
- Automatically — IP addresses and user agents are logged when you submit forms, for security and rate-limiting purposes
- Via browser storage — localStorage is used to save your Readiness Tracker progress locally on your device
4. How We Use Your Information
- To send you email communications you have consented to (newsletters, product launch notifications, travel tips)
- To plan merchandise inventory based on size and country preferences
- To prevent abuse, fraud, and spam through rate limiting
- To improve our website and content based on aggregate, anonymized usage patterns
- To comply with legal obligations
We will never sell your personal information to third parties.
5. Affiliate Partners and Third-Party Sharing
Our website contains affiliate links to third-party products and services. When you click an affiliate link, you leave our site and interact directly with the third party. We may earn a commission at no additional cost to you.
Our affiliate partners include:
- Booking.com — hotel reservations
- Amazon Associates — travel accessories
- World Nomads — travel insurance
- SafetyWing — travel insurance
- Allianz Travel Insurance — travel insurance
- Airalo — eSIM data plans
- Nomad eSIM — eSIM data plans
- SimOptions — eSIM and SIM plans
- Wise (TransferWise) — multi-currency cards
These partners may place their own cookies or collect information when you visit their sites. We encourage you to review their respective privacy policies. We do not control their data practices.
As an Amazon Associate, LoyalVale Inc. earns from qualifying purchases.
Other Third-Party Services
- Exchange Rate API (open.er-api.com) — Our currency converter fetches live exchange rates. Your IP address may be visible to this service during the API call.
- Google Fonts — Fonts are loaded from Google's servers. Google's privacy policy applies.
- Hosting Provider — Our web hosting provider may log access data (IP addresses, request times) as part of standard server operations.
6. Cookies and Tracking Technologies
| Technology | Type | Purpose | Duration |
|---|---|---|---|
| localStorage (wc26_readiness) | Browser storage | Saves your World Cup Readiness Tracker progress | Persistent until cleared |
| PHP session cookie | Essential cookie | Admin authentication for stats dashboard | Session |
We do not use advertising cookies, analytics tracking pixels, or cross-site tracking technologies on our website.
How to manage cookies: You can clear cookies and localStorage data through your browser settings. Disabling cookies will not affect the core functionality of our site for visitors.
7. Consent and Your Right to Withdraw
Email Communications (CASL Compliance)
We only send commercial electronic messages to individuals who have provided express opt-in consent. By entering your email address and clicking "Subscribe" or "Join Waitlist," you expressly consent to receive emails from LoyalVale Inc. including newsletters, travel tips, merch launch notifications, and product recommendations that may contain affiliate links.
You may withdraw consent at any time by:
- Clicking the "Unsubscribe" link in any email we send
- Emailing us at [email protected]
We will process your unsubscribe request within 10 business days as required by CASL.
Other Data
For data collected with implied consent (IP addresses, user agents), you may request deletion at any time by contacting our Privacy Officer.
8. Data Retention
- Email and subscriber data: Retained for the duration of the subscription plus 3 years after unsubscribe (CASL consent record-keeping requirement)
- IP addresses and user agents: Retained for up to 12 months, then permanently deleted
- Rate-limiting data: Automatically purged after 1 hour
- localStorage data: Stored locally on your device only; we do not have access to it
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- HTTPS encryption for all data in transit
- Server-side access controls and directory protections (.htaccess)
- Rate limiting to prevent automated abuse
- Honeypot spam detection on forms
- Password-protected administrative access
- Data directory access blocked from public web
No system is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
10. Your Rights
Under PIPEDA (All Users)
- Right to access — Request a copy of your personal information
- Right to correction — Request correction of inaccurate information
- Right to withdrawal — Withdraw consent for future communications
- Right to complain — File a complaint with our Privacy Officer or the Office of the Privacy Commissioner of Canada at priv.gc.ca
Under GDPR (European Economic Area Residents)
If you are located in the EEA, your personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679. In addition to the rights above, you also have:
- Right to erasure ("right to be forgotten") — Request deletion of your personal data
- Right to data portability — Receive your data in a machine-readable format
- Right to restrict processing — Request that we limit how we process your data
- Right to object — Object to processing based on legitimate interest, including direct marketing
- Right to lodge a complaint with your local data protection supervisory authority
Canada has been granted an adequacy decision by the European Commission under PIPEDA, facilitating lawful data transfers between the EU and Canada.
Under CCPA/CPRA (California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale or sharing of personal information
- Non-discrimination for exercising your privacy rights
We do not sell your personal information. We honour Global Privacy Control (GPC) browser signals.
How to Exercise Your Rights
To exercise any of the above rights, contact our Privacy Officer at [email protected]. We will respond within 30 days (PIPEDA/GDPR) or 45 days (CCPA).
11. International Data Transfers
Your personal information may be processed in Canada, where our servers are located. If you are visiting from outside Canada, your data will be transferred to and stored in Canada. Canada's privacy laws have been recognized by the European Commission as providing adequate protection for personal data.
12. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at [email protected] and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting a notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.
14. Contact Us
LoyalVale Inc. Privacy Officer
Email: