Privacy Policy

1. Our Commitment

SwiftStay operates furnished residential rentals in Winnipeg, Manitoba. We are committed to protecting the personal information of our guests, property owners, and organization partners in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Manitoba provincial law.

2. Information We Collect and Why

• Account Details: Name, verified email address, and phone number to create sessions and communicate regarding booking requests.
• Identity Verification: We use an authorized identity verification provider (e.g., Stripe Identity). SwiftStay stores only the verification status and reference token. We do not store copies of your government ID or selfies, and we never collect Social Insurance Numbers (SINs).
• Stay Requests & Tenancy Records: Dates, stay reason, organization affiliation, and statutory residential tenancy agreements required by The Residential Tenancies Act of Manitoba.
• Payment & Banking Data: Processed securely via PCI-compliant payment gateways. SwiftStay never stores full credit card numbers or banking credentials on our servers.

3. Privacy in Furnished Homes & Surveillance Prohibition

In accordance with The Privacy Act (C.C.S.M. c. P125) and Section 54 of The Residential Tenancies Act:

• No Covert Surveillance: Cameras, audio listening devices, or covert surveillance of any kind inside private interior areas of any SwiftStay home are strictly prohibited.
• Entry Notice: Landlords must provide at least 24 hours' written notice before entering a rented unit, specify a reasonable time window, and only enter for reasons permitted under the Act.

4. Data Retention & Safeguards

Session tokens are cryptographically hashed using SHA-256 before storage. Audit event logs are retained for two years to comply with Canadian statutory breach recording standards. Once a tenancy and its limitation periods conclude, personal records are scheduled for secure de-identification or deletion.

5. Breach Reporting Runbook

In the event of a security incident involving personal information, SwiftStay assesses the risk of significant harm under PIPEDA regulations. If a real risk of significant harm exists, we promptly notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC).

6. Contact Our Privacy Officer

To request access to your personal information, request corrections, or ask privacy questions, contact our designated Privacy Officer at: