Privacy Policy

Please note. This document is an informational template prepared for Bluff and Bash and written to reflect the way this website actually works. It is not legal advice. Before you rely on it, have it reviewed by a qualified lawyer in Canada, and keep it in step with your real data handling.

1. Who we are

Bluff and Bash, trading as Bluff and Bash, is the organisation responsible for personal information collected through this website. In PIPEDA terms we are the organisation accountable for that information.

Brand: Bluff and Bash
Legal name: Bluff and Bash
Country of registration: Canada
Address: 3710 Bd Sainte-Anne, Quebec, QC G1E 3M3, Canada
Email: [email protected]
Telephone: +1 204 675 4382
Website: bluffandbash.com
Service: organisation of casino-themed offline events in Canada

Privacy questions and requests should go to [email protected] with “Privacy” in the subject line.

2. Scope of this policy

This policy covers bluffandbash.com and the enquiry, quoting and event-delivery activities that follow from it. It applies to visitors, people who send an enquiry, clients, venue contacts and anyone who contacts us by telephone or email.

Bluff and Bash provides offline, adults-only casino-themed event entertainment. We do not operate an online casino, a gaming platform, a betting service or any account-based product, so we do not collect payment credentials, identity documents or play histories through this website.

3. Information we collect

3.1 Information you give us

Through the enquiry form, which is the only form on this website, we collect:

Field	Required	Why we ask
Name	Yes	To address our reply and the quote correctly
Phone number	Yes	To discuss the room, the headcount and the date by telephone
Event type	Yes	To check the right crew and equipment are available
Event date	Yes	To check availability for that date
Brief / notes	No	Optional context such as venue, city or guest count
Three confirmations	Yes	Adults-only event, agreement to this policy, and acknowledgement that there is no real-money gambling, betting or cash prizes

If you then become a client, we collect what the booking requires: a billing contact, venue details, access arrangements, an on-site contact number and any accessibility or safety information you choose to share.

If you email or telephone us, we hold the content of that correspondence for as long as it is needed to answer you and to keep a record of what was agreed.

3.2 Information collected automatically

Our hosting provider records standard server log data for security and reliability: IP address, date and time, the page requested, the referring page, and browser and device type. These logs are generated by the web server itself rather than by optional cookies, and they are kept for a short period and then overwritten.

Beyond that, nothing non-essential is collected until you allow it. Analytics and advertising technologies on this site are disabled by default and only run if you grant the matching category in our cookie banner. See sections 7 to 10.

3.3 What we do not collect

No payment card details are collected through this website.
No identity documents are uploaded or stored through this website.
No account is created and no password is held, because there is nothing on this site to log in to.
No special-category or sensitive information is requested. Please do not send any.
No information is knowingly collected from anyone under 18+.

4. Why we use it

To answer your enquiry — checking availability, preparing a quote and contacting you about it.
To plan and deliver an event — floor plans, run sheets, crew scheduling, venue liaison.
To administer a booking — scopes of work, invoicing and the records we are required to keep.
To keep the site working and secure — server logs, abuse prevention, spam filtering on the form.
To measure the website — aggregated statistics, only if you allow analytics cookies.
To measure advertising — conversion measurement and, where applicable, ads personalization, only if you allow marketing cookies.
To meet legal obligations — tax and accounting records, and responding to lawful requests.

We do not sell personal information. We do not share it for anyone else’s independent marketing. We do not add enquirers to a marketing list without asking separately.

Under PIPEDA we rely on your consent, and we identify the purpose before or at the time we collect information.

Express consent for the enquiry form: you tick the confirmation boxes and press send, which is a clear, affirmative act.
Express consent for analytics and advertising cookies: these are off until you switch them on. Nothing is implied from scrolling, closing the banner or continuing to browse.
Implied consent for strictly necessary site operation and security, which a visitor would reasonably expect when loading a web page.
Legal requirement where we must retain records for tax, accounting or other statutory reasons.

You may withdraw consent at any time — see sections 14 and 15. Withdrawal does not affect anything already done lawfully while consent was in place.

6. How long we keep it

Record	Retention
Enquiries that do not become bookings	24 months from the last contact, then deleted
Client booking files	7 years from the event, to meet accounting and limitation requirements
Email correspondence	24 months, or 7 years where it forms part of a booking file
Server logs	Short rolling period set by our hosting provider, then overwritten
Your cookie choice	Up to 180 days, stored on your own device, then you are asked again
Analytics data	Only if you allowed analytics; retention is set in the measurement tool and does not exceed 14 months

When a retention period ends, records are deleted or anonymised. If you ask us to delete sooner, see section 15.

7. Cookies and similar technologies

This website uses cookies and similar technologies to operate the site, measure performance and — with your consent — for advertising measurement and personalization. Where Google services are used, some data may be shared with Google.

Three categories are used, exactly as presented in the banner:

Essential cookies: Always active and strictly limited to making the site work: remembering your cookie choice, security and form handling. These never carry advertising or analytics permissions.
Analytics cookies: Off by default. Aggregated measurement of how pages are used. These control analytics_storage.
Marketing cookies: Off by default. Advertising measurement, remarketing and ads personalization. These control ad_storage, ad_user_data and ad_personalization.

No analytics or marketing cookie is set before you consent. You can accept all, decline, or customise your choice, and declining is exactly as easy as accepting. Your choice can be changed or withdrawn at any time through , which is also permanently available in the footer of every page.

Full detail, including the Consent Mode signals and the individual cookies involved, is in our Cookie Policy.

Further information from Google about data from sites and apps that use Google services: How Google uses data from sites or apps that use our services. Google’s information for businesses about data responsibility: business.safety.google/privacy.

8. Analytics

Where analytics is enabled by your consent, we use it only to understand aggregate behaviour: which pages are read, which formats attract interest, where enquiries are started and abandoned, and whether the site works on the devices people actually use. We use Google Analytics 4 for this purpose.

We configure analytics to avoid collecting more than we need: IP addresses are not used to identify individuals by us, we do not upload enquiry contents into analytics, and we do not attempt to combine analytics data with your enquiry record.

If you decline analytics cookies, no analytics tag is loaded and no analytics cookie is set.

9. Advertising and Google Ads

We may advertise this business in Canada, including through Google Ads. Where you have granted marketing consent, advertising technologies may be used to:

measure whether an advertisement led to an enquiry (conversion measurement);
avoid showing you the same advertisement repeatedly;
show you our advertisements on other sites and services (remarketing);
personalize advertising where that is permitted by your consent choices.

Where these tags are enabled, some data — such as online identifiers, the fact that you reached our thank-you page, and technical information about your device — may be shared with Google and processed by Google as described in its own documentation. Google may act as our processor for measurement and, in some contexts, for its own purposes as a controller. Please read How Google uses data from sites or apps that use our services and Google Business Data Responsibility.

If you decline marketing cookies, no advertising tag is loaded, no advertising cookie is set, no conversion is attributed to you through cookies, and no ads personalization signal is sent.

We do not advertise gambling products, because we do not offer them. Our advertising promotes offline, adults-only themed event services only, and we do not target audiences under 18+.

10. Google Consent Mode v2

This website implements Google Consent Mode v2. Before you make a choice, all four consent signals are set to denied:

ad_storage: denied
analytics_storage: denied
ad_user_data: denied
ad_personalization: denied

When you make a choice, a consent update is sent that mirrors it exactly: allowing analytics grants analytics_storage; allowing marketing grants ad_storage, ad_user_data and ad_personalization; declining leaves them denied. Essential cookies never grant any of these signals. Your stored choice is re-applied on every page you visit, and withdrawing consent also clears the related cookies that were set while it was in place.

11. Service providers

We keep the list of third parties deliberately short. Each one receives only what it needs, is bound by contract to use it only on our instructions, and is expected to provide a comparable level of protection.

Provider type	Purpose	Data involved
Web hosting	Serving this website; server logs	Technical log data
Business email	Receiving and answering enquiries	Your name, phone, event details, correspondence
Measurement (consent-based)	Google Analytics 4, where you allow analytics	Pseudonymous usage and device data
Advertising (consent-based)	Google Ads conversion measurement and remarketing, where you allow marketing	Online identifiers, conversion events
Accounting	Invoices and statutory records for clients	Billing contact and transaction records
Event subcontractors	Crew, transport or styling on a specific booking	Only the operational detail needed for that event

12. Storage and transfers

We are based in Canada and keep records here. Some service providers, in particular measurement and advertising providers, may process information outside Canada, including in the United States. Where that happens, information may be subject to the laws of that jurisdiction, including lawful access by courts and public authorities.

We use contractual protections with those providers and limit what is transferred. You may ask us for more detail about transfers relevant to you by writing to [email protected].

13. Safeguards

The site is served over HTTPS.
Access to enquiry records is limited to the people who answer and deliver enquiries.
Accounts holding personal information use multi-factor authentication where available.
Enquiry data is not shared with subcontractors beyond what a specific event requires.
Records are deleted or anonymised at the end of the retention periods in section 6.

No safeguard is absolute. If a breach occurs that creates a real risk of significant harm, we will act in line with PIPEDA’s breach obligations, including notifying affected individuals and the Office of the Privacy Commissioner of Canada where required.

14. Your rights

Under PIPEDA you may:

Access the personal information we hold about you and be told how it has been used and to whom it has been disclosed.
Correct information that is inaccurate or incomplete.
Withdraw consent, subject to legal and contractual restrictions — including withdrawing cookie consent at any time.
Ask questions about our practices and receive an explanation of our policies and procedures.
Complain to us, and then to the Office of the Privacy Commissioner of Canada.

Write to [email protected]. We will acknowledge promptly and respond within 30 days, or tell you why we need an extension. We may ask you to confirm your identity before releasing information, and we will not charge for a straightforward request.

15. Deletion requests

You can ask us to delete your enquiry at any time. Email [email protected] with “Delete my enquiry” and the phone number or event date you used, and we will remove the record and confirm in writing.

We may need to retain limited information where a statutory obligation applies — invoices and accounting records for a completed booking, for example. If that is the case, we will tell you exactly what is being kept and why.

To clear cookies set on your own device, use and decline, or clear cookies in your browser settings.

16. Age of visitors

Our events and this website are intended for adults aged 18+ and over. We do not market to minors, we do not knowingly collect information from anyone under that age, and age is checked at the door of every event. If you believe a minor has sent us information, contact [email protected] and we will delete it.

17. Changes

We update this policy when our practices or the technology on this site change. The review date is shown at the top of the page. Material changes affecting how we use personal information will be summarised here, and where the change requires it, we will ask for consent again.

18. Contact and complaints

Speak to us first — most questions are resolved in a single email.

Privacy contact: [email protected]
Telephone: +1 204 675 4382
Post: Bluff and Bash, 3710 Bd Sainte-Anne, Quebec, QC G1E 3M3, Canada
Response time: Acknowledged promptly, answered within 30 days

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada: priv.gc.ca. Depending on where you live, a provincial privacy commissioner may also be able to help.