Privacy Policy

Introduction

ClickTheMouse ("ClickTheMouse," "we," "us," or "our") is a Canadian travel agency that specializes in Disney vacations, including Disney Cruise Line, Walt Disney World, Disneyland, Aulani, Adventures by Disney, Universal Orlando, and other travel experiences. We are an Authorized Disney Vacation Planner at the Platinum level, registered with TICO (50024500), the Florida Seller of Travel program (ST42493), and the California Seller of Travel program (2161303-50).

This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit clickthemouse.ca, request a quote, book a vacation, or otherwise interact with us. By using our website or services, you consent to the practices described in this policy.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25, Canada's Anti-Spam Legislation (CASL), and applicable U.S. state privacy laws where relevant.

1. Personal Information We Collect

We collect personal information that you voluntarily provide and certain technical information automatically gathered when you use our website.

Information you provide directly:

• Full name and preferred name
• Email address and phone number
• Mailing address and country/province of residence
• Date of birth and ages of travellers (required by suppliers for booking)
• Passport information (when booking international travel)
• Travel preferences, dates, and party composition
• Payment information (processed by our suppliers and third-party processors — we do not store credit card numbers)
• Communications you send to us (emails, chat messages, social media messages, phone records)
• Marketing preferences and feedback

Information collected automatically:

• IP address and general geographic location
• Device type, browser type, and operating system
• Pages visited, time spent, and referral source
• Essential cookies required for website functionality
• Interaction with marketing emails (opens, clicks)

2. How We Collect Personal Information

We collect personal information in the following ways:

• Quote request forms submitted through clickthemouse.ca
• Booking discussions by email, phone, video call, or messaging platforms
• Inquiries through our social media accounts
• Industry partners and suppliers when they share booking confirmations or updates
• Public records and references where legally permitted

3. Why We Collect Personal Information

Service delivery:

• To provide travel quotes and recommendations
• To book and manage your vacation reservations with Disney, Universal, and other suppliers
• To communicate with you about your bookings, including itinerary changes, payment reminders, and travel updates
• To facilitate your purchase of travel insurance, ground transfers, and other add-ons

Promotional offers:

• To calculate and apply our onboard credit, Adventures by Disney discount, and other promotional gifts
• To inform you of current Disney and supplier offers relevant to your bookings

Business operations:

• To respond to your inquiries
• To improve our services and website
• To send marketing communications when you have consented to receive them
• To comply with legal, tax, and regulatory obligations
• To protect against fraud and unauthorized access

4. How We Share Personal Information

We share your personal information only as necessary to provide our services and as permitted by law. We do not sell your personal information to third parties.

Suppliers and partners:

To make your booking, we share relevant personal information with Disney Cruise Line, Walt Disney World, Disneyland, Aulani, Adventures by Disney, Universal Orlando Resort, Royal Caribbean and other cruise lines, travel insurance providers, ground transfer, hotel, and excursion providers, airlines, and other suppliers as needed for your booking.

Service providers:

We use third-party tools to operate our business, including booking management software, email service providers, payment processors, CRM platforms, website hosting providers, and cloud storage providers. These providers are contractually required to protect your information and use it only for the services they provide to us.

Legal and safety:

We may disclose personal information when required to do so by law, court order, or regulatory authority, or to protect the rights, property, or safety of ClickTheMouse, our clients, or others.

Business transfers:

If ClickTheMouse is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify clients of any such change.

5. Cross-Border Data Transfers

ClickTheMouse operates offices in Canada and Orlando, Florida. Our suppliers (including Disney, Universal, and most cruise lines) are headquartered in the United States. As a result, your personal information may be stored or processed in the United States and other countries where our suppliers and service providers operate.

When personal information is transferred outside Canada, it may be subject to foreign laws, including lawful access requests by foreign governments. We take reasonable steps to ensure that personal information transferred outside Canada is protected by safeguards comparable to those required under Canadian law.

6. How Long We Retain Personal Information

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

• Active client records: retained while you are an active client and for up to seven years after your last booking, in accordance with tax and accounting requirements
• Marketing-only contacts: retained until you unsubscribe or request deletion
• Communications: retained for up to seven years for business and legal purposes

When personal information is no longer required, we securely delete or anonymize it.

7. Your Rights

Under PIPEDA and applicable provincial privacy laws, you have the following rights:

• Right to access: You may request a copy of the personal information we hold about you.
• Right to correct: You may request that we correct inaccurate or incomplete information.
• Right to withdraw consent: You may withdraw your consent to our use of your information at any time, subject to legal or contractual restrictions.
• Right to unsubscribe: You may unsubscribe from marketing emails at any time using the link in each email.
• Right to complain: You may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca, or with your provincial privacy commissioner.

To exercise any of these rights, contact our Privacy Officer using the details in Section 13. We may need to verify your identity before responding to your request. We will respond within 30 days of receiving a valid request.

8. Cookies

We use essential cookies required for the basic operation of our website (for example, remembering form entries during a session). We do not use third-party analytics tools or marketing tracking pixels.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of our website from working correctly.

9. Marketing Communications

We send marketing communications only with your express consent, in compliance with CASL. You may opt out at any time by clicking the "unsubscribe" link in any marketing email, contacting our Privacy Officer, or replying to any marketing email with the word "unsubscribe."

We process unsubscribe requests within ten business days.

10. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of 13 without parental consent. Bookings that include minors are made by the parent or legal guardian, who is responsible for any personal information provided about those minors.

If you believe we have collected personal information from a child without proper consent, please contact our Privacy Officer and we will delete it.

11. Security

We use commercially reasonable physical, technical, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted website connections (SSL/TLS), restricted access to client records, secure cloud storage, and password protections.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12. Third-Party Websites

Our website may link to external sites (such as Disney.com, Universal.com, or supplier websites). We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before sharing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on our website with a revised "Last Updated" date and, where required, by direct notice to affected clients.

14. Contact Us

For privacy questions, requests, or complaints, contact our Privacy Officer:

For complaints not resolved by us, you may contact: