Scope and privacy contact
This notice explains how Expera Group Inc., operating as Experience Calgary, handles personal information for the website and the connected membership app and services. It covers account access, memberships, payments, benefit use, gifts, referrals, Guest List reservations, support and website operation. For privacy questions, access, correction or deletion requests, contact curator@experiencecalgary.ca or 403-615-8521 and ask for the person responsible for privacy. Do not include passwords, full card details or private QR passes in an ordinary email. This notice is effective March 1, 2026. Contact us electronically to arrange written correspondence or make a privacy request.
Account and profile information
We process your account identifier, name, email address, sign-in provider, email-verification status and account status to identify you, secure access and connect the website and app to the same membership records. Google Firebase Authentication handles sign-in. If you choose a third-party provider, that provider also handles information under its own notice. You can browse public experiences without creating a member account; private benefits and account operations require authentication.
Membership, payment and benefit records
We keep membership tier and term dates, renewal and cancellation status, payment and subscription references, accepted policy versions, receipts, credit balances and provenance, selected benefits, redemption history and related service records. These records support the benefits you purchased, preserve saved credits, prevent duplicate grants and investigate errors or misuse. Stripe handles payment-card entry and processing through its hosted checkout, invoice and billing-management pages. Our application stores payment references, amounts, tax, outcomes and billing status rather than full card numbers or card security codes.
Gift and referral information
When you send a gift we process your account, the recipient email you enter, your optional message, the selected credit, sponsoring membership, reservation and transfer history, and delivery attempts. The addressed verified recipient can see and accept the invitation; the sender can see its status and cancel before acceptance. Gifted-credit eligibility is checked against the recorded sponsor. Referrals use private invitation references, expiry, purchaser eligibility and reward records. A recipient email or invitation is not treated as general marketing consent. Give us another person’s details only for an invitation they expect, and avoid putting sensitive personal information in a gift message.
Reservations, venue staff and admission
Guest List records may include the member and release identifiers, the selected venue/event, guest count, claim/cancellation status and attendance or admission records. Authorized assigned venue staff receive the information needed to check a reservation or member-selected benefit, confirm admission or redemption, and manage their venue’s service. A participating venue may separately collect booking or service information under its own privacy practices. Public catalog pages do not publish your private membership, gift or reservation history.
Contact, Concierge and messages
If you contact us, we process your contact details, enquiry type, message and, for partner enquiries, the business details you provide. Website enquiries are sent to curator@experiencecalgary.ca using the configured Google/Gmail mail service, with your email as Reply-To. If you use in-app Concierge or share an attachment, the message and attachment are handled by the connected support service and its authorized participants. Contacting us by SMS or external email also involves your carrier or email provider. We use these details to respond and retain relevant service history, not as automatic permission for unrelated promotions.
Camera and optional device features
The website business scanner asks for camera permission to read a QR code locally in the browser; it submits the decoded member-pass reference for authorized server checks rather than uploading camera frames through that scanner. Manual entry is available where supported. In the mobile app, notification, camera, photo or location permissions may be requested for the feature you choose. You can manage device permissions in your browser or operating system; disabling a permission may limit the related feature.
Browser storage and technical information
Firebase uses browser storage for the configured sign-in session. We also use short-lived browser/session state for checkout retry identifiers, returning to a public homepage presentation, and interface choices such as dismissing a Concierge prompt. These functions are distinct from advertising tracking. Hosting, authentication, email and payment services can process technical information such as network addresses, request times, device/browser details, service errors and security logs to provide and protect the service. Do not share a device session or private invitation link with someone you do not trust.
Optional campaign measurement and marketing choices
Optional campaign measurement is currently disabled. If enabled later, the website asks before remembering permitted campaign labels for the current browser session and associating them with a purchase. You can decline or change that optional choice using Privacy choices when available. This website does not use a Meta pixel, conversion API or a third-party advertising tracker. Essential account, payment, verification, gift and reservation messages are kept separate from unrelated promotional consent. Any promotional messages must have the applicable consent and withdrawal mechanisms.
Service providers and processing locations
We use Google/Firebase and Google Cloud for identity, database, file storage, hosting and related operations, Google/Gmail for configured email delivery, and Stripe for payment processing. Information is shared with these providers as needed for their functions and with authorized staff and participating venues for service delivery. Our primary membership database is hosted in Canada; website hosting, application services and file storage also use United States infrastructure. Provider support, backups and payment/email processing may occur in Canada, the United States or other locations used by those providers. Information processed outside Canada may be accessible under the laws of the relevant country. Contact our privacy contact for questions about these providers and cross-border practices.
Why information may be disclosed
We disclose information for the service functions described here, with your consent where required, or where permitted or required by applicable law. This can include responding to a lawful request, protecting accounts and service integrity, investigating fraud or errors, and resolving legal or payment disputes. We do not make private member records part of the public catalog, and the current website does not provide a feature for selling personal information to advertisers.
Retention, correction and deletion
Information is retained for as long as reasonably needed to operate the account and program, honour benefits, resolve disputes, maintain reliable receipts and audit history, and meet legal, tax and security requirements. Membership lapse does not automatically delete saved credits or past redemptions. You may request access, correction or deletion and withdraw consent where applicable. We may need to verify your identity, explain limits or exceptions, and retain records required by law or necessary to protect legitimate obligations; we do not promise instant deletion of every transaction, shared message or backup. Removing an account is not a substitute for cancelling renewal, so ask us to address both if needed.
Your choices and complaints
You can avoid creating an account, choose available sign-in methods, control optional device permissions, decline optional campaign measurement, and contact us to make a written personal-information request or privacy complaint. Withdrawing consent needed for an essential function may prevent us from providing that function, which we will explain. We respond within the periods required by applicable law and explain any lawful extension or refusal. If your concern is not resolved, you may contact the Office of the Information and Privacy Commissioner of Alberta, or the relevant privacy regulator where applicable. Our practices are subject to applicable Alberta private-sector privacy law and Canadian privacy law where it applies.
Safeguards and updates
We use account authentication, role and venue-assignment checks, private storage and server-side authorization to restrict access. These measures reduce risk but do not guarantee that any online service is completely secure. Tell us promptly about suspected unauthorized access. We review material changes to this notice before publication and communicate them as required; the approved policy version associated with a purchase is kept with its agreement record.