Privacy Policy

Last updated: September 27, 2026

This policy explains how MIDFIELD (“we”, “us”) collects, uses and protects personal information when you visit maxcanada-lotto.com or contact us about a hotel booking. We keep collection to what we need to answer your request and arrange your stay.

1. Who is responsible

MIDFIELD is the organization responsible for your personal information. Contact: [email protected], 200 Bay Street, Suite 1800, Toronto, ON M5J 2J2, Canada.

2. Information we collect

Information you give us. When you use the booking or contact forms, or write to us, we collect your name, email address, phone number (optional), the hotel and dates you are interested in, the number of guests and rooms, and anything you choose to include in your message, such as special requests or accessibility needs.

Information collected automatically. Like most websites, our hosting provider records technical data such as your IP address, browser type, device, referring page and the pages you view, in server logs used for security and troubleshooting.

Information we do not collect here. This website does not collect payment card details. Payments, when needed, are handled by the hotel or a secure payment provider under their own privacy policies.

3. Cookies and similar technologies

The website itself does not set advertising or analytics cookies. Pages load fonts from Google Fonts, which means your browser connects to Google servers and shares your IP address with Google; see Google's privacy policy for details. If we introduce analytics or other non-essential cookies in future, we will ask for your consent first and update this policy. You can block or delete cookies at any time in your browser settings.

4. How we use your information

  • To reply to your enquiry and prepare a quote.
  • To make, manage and change reservations with hotels and suppliers on your behalf.
  • To send service messages about your booking, such as confirmations and reminders.
  • To keep records required for accounting, tax and legal purposes.
  • To protect the website against fraud and misuse.

We do not sell your personal information, and we do not send marketing emails unless you have opted in. You can opt out of marketing at any time.

5. Legal bases

Where the EU or UK General Data Protection Regulation applies, we rely on: steps taken at your request before entering into a contract, and performance of that contract (quotes and bookings); your consent (the contact form consent box and any marketing); our legitimate interests in running a secure website and improving our service; and legal obligations (record keeping). In Canada we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA).

6. Sharing

We share only what is necessary with: the hotel and any suppliers involved in your booking; service providers who host our website and email under confidentiality agreements; and authorities where the law requires it. Hotels may be located outside your country, including in the United States, Singapore, Monaco, the Bahamas and Australia. When information is transferred abroad we use appropriate safeguards, such as contractual protections.

7. How long we keep information

  • Enquiries that do not lead to a booking: up to 24 months, then deleted.
  • Booking records: up to 7 years after the stay, to meet accounting and tax obligations.
  • Server logs: up to 90 days.
  • Marketing preferences: until you withdraw consent.

8. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, ask us to delete it, restrict or object to certain processing, receive a copy in a portable format and withdraw consent at any time without affecting earlier processing. To make a request, email [email protected]. We will respond within 30 days and may need to verify your identity. You also have the right to complain to a supervisory authority, such as the Office of the Privacy Commissioner of Canada or the data protection authority in your country.

9. Security

The website is served over an encrypted connection. Access to booking information is limited to staff who need it, and we use reputable providers with appropriate technical and organizational safeguards. No method of transmission is completely secure, so please do not send card numbers or passport scans by email.

10. Age

Our services are intended for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has sent us personal information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. Significant changes will be highlighted on this page.

12. Contact

Questions about privacy: [email protected], or by post to MIDFIELD, 200 Bay Street, Suite 1800, Toronto, ON M5J 2J2, Canada.