Privacy Policy

Personal information you disclose to us

In shortWe collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

• Email addresses
• Movie, theatre, showtime and seat selections
• Watch names or labels you choose
• Messages you send through our contact form

Sensitive Information. We do not process sensitive information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In shortWe automatically collect a limited amount of technical information.

We temporarily record your IP address to enforce rate limits that protect the Services from abuse. These records expire automatically; we do not store IP addresses in our database and we do not resolve them to a location.

When you submit our contact form, we record your browser’s user-agent string to help diagnose reported issues.

Our servers keep operational logs of request paths, response codes, and timing. These do not include IP addresses or information identifying you.

We do not use analytics services, and we do not collect referring URLs, device identifiers, device names, language preferences, or location data.

In shortWe process your information to provide, improve, and administer our Services, to communicate with you, for security purposes, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
• To monitor seat availability. We periodically check the showtimes you select and notify you when the specific seats you are watching become available.
• To respond to user inquiries and offer support. We may process your information to respond to your inquiries and resolve any issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about the Services, changes to our terms and policies, and other similar information.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including abuse monitoring and prevention.
• To evaluate and improve our Services and your experience. We may process your information when we believe it is necessary to evaluate and improve our Services and your experience.
• To identify usage trends. We may process information about how the Services are used so we can better understand and improve them.
• To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

In shortWe only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse
• If it is reasonable to expect that collection and use with consent would compromise the availability or accuracy of the information, and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

In shortWe may share information in specific situations described in this section and with the third parties listed below.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, or contractors (“third parties”) who perform services for us or on our behalf and require access to such information to do that work.

The third parties we may share personal information with are as follows:

• Cloud Computing Services — OVHcloud
• Communicate and Chat with Users — Resend
• Content Optimization — Google Fonts and The Movie Database (TMDB)

Transfers outside Quebec and Canada. Our servers are located in Quebec, Canada. Resend, Google Fonts, and The Movie Database are located in the United States, so information shared with them is processed outside Quebec and outside Canada, and may be subject to the laws of that country.

We also may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

In shortWe use one strictly necessary cookie and no tracking technologies.

We use a single cookie, session_token, which keeps you signed in after you click a magic link. It is httpOnly (not readable by scripts running on the page), restricted to our own site, sent only over HTTPS, and expires after 7 days. Signing out deletes it.

We also store two items in your browser’s local storage: seat selections you have made but not yet saved, and your watchlist display preferences. Both stay on your device and are never transmitted to us.

We do not use analytics, advertising, retargeting, web beacons, or tracking pixels, and we do not permit third parties to place tracking technologies on our Services.

Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies, but doing so will prevent you from staying signed in.

In shortWe keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. In general, we keep your account information for as long as you have an account with us.

When you delete your account, your watches and seat-tracking history are deleted with it. We retain a limited operational record — a log of alert messages we sent you and any support correspondence — together with login records kept for security purposes. These contain your email address.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because it has been stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.

In shortWe aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These include passwordless authentication (we never store passwords), session tokens held in httpOnly cookies that page scripts cannot read, encrypted connections (HTTPS) across our Services, rate limiting to prevent abuse, and restricting database access to our own servers.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

In shortWe do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.

We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction, or that you are the parent or guardian of such a minor and consent to that minor’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at contact@cinewatch.ca.

In shortIn some regions, such as Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) if applicable, to data portability, and (v) not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the details in the How can you contact us about this notice? section below.

We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time by contacting us using the details in the How can you contact us about this notice? section below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal, nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information. You can delete individual watches at any time from your dashboard. To review or change other information in your account, or to close your account entirely, contact us using the contact information provided.

Upon your request to close your account, we will delete your account and information from our active databases, subject to the limited operational records described in How long do we keep your information? above.

If you have questions or comments about your privacy rights, you may email us at contact@cinewatch.ca.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

We note that we do not track our users across websites or over time, and we do not permit third parties to do so on our Services.

When you track a showtime, we store which film, theatre and date you selected, the specific seats you are watching, any name you give the watch, and a record of when those seats changed availability. Together this can reveal what you plan to see and when.

We use it for one purpose: checking those seats and alerting you when they open. We do not build profiles, infer your preferences, analyse your viewing habits, or use this information to make automated decisions about you. We do not share it with Cineplex, with advertisers, or with anyone else.

Your watches are visible only to you. They are deleted when you delete the watch, and when you request to delete your account.

In shortYes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at contact@cinewatch.ca, or reach us through the contact form.

The person responsible for privacy matters is Kian Shahnia, operating as Cinewatch, in Canada.

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please use our contact form.