C Square Property Investment & Management
Effective date: August 20, 2026 · Version: 2.0 · Last updated: August 20, 2026

C Square Property Investment & Management Ltd. (“C Square,” “we,” “us,” “our”) provides residential property management and related services in British Columbia, Canada, and manages short-term rental properties in British Columbia and California, USA.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, where it is stored, how long we keep it, and the rights you have over it. It applies to csquareproperty.com, to bookings and enquiries made through the website, and to the services we provide to guests, tenants, rental applicants, and property owners.

We handle personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA) and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Guests and property owners in California should also read Section 11 — Your California Privacy Rights.

1. Who this policy covers

Personal information about a tenancy is also subject to British Columbia’s Residential Tenancy Act. Nothing in this policy limits your rights under that Act.

2. Personal information we collect

We collect only what we need for the purposes set out in Section 4.

From everyone who contacts us
Name; email address; phone number; the content of your message; how you reached us (website form, phone, email, WhatsApp, or referral).

From guests booking a short-term rental
Booking details (property, dates, number and names of occupants, and — where a property has age-based occupancy limits — the ages of accompanying children, provided by the booking adult); billing name and address; payment confirmation data (see Section 5); arrival and travel details you choose to share; accessibility requirements or other requests you make; messages exchanged with us before, during, and after the stay; and any review or feedback you submit.

From tenants and rental applicants
Application details including current and previous addresses, employment and income information, references, and — where you consent at the time of application — credit and tenancy-history checks; identification; emergency contact; tenancy agreement and payment records; maintenance requests and related correspondence.

From property owners and landlords
Name and contact details; property address and details; ownership or authority documentation; short-term rental registration and business licence numbers where applicable; strata rules where applicable; banking or payout details for remitting rental income; tax information required to report income; the management agreement and related correspondence.

Automatically, when you use the website
IP address, browser type and version, device type, operating system, referring page, pages viewed, time spent, and approximate location derived from IP address. See Section 7 for cookies.

We do not knowingly collect government-issued identification by email or WhatsApp, full payment card numbers, or health information. Please do not send these to us through those channels.

3. Where the information comes from

Most of it comes directly from you. We also receive personal information from:

• Booking channels. Where you booked through a listing platform rather than our website, that platform passes us the booking and contact details it holds.
• Our channel manager. Smoobu, which synchronises our calendars and booking records.
• Our payment processor, Stripe, which returns confirmation and fraud-screening results.
• Credit and tenancy reporting agencies, for rental applicants who have consented.
• Property owners, who provide information about their properties and occupants.

4. Why we use it

We use personal information for the following purposes, and no others without your consent:

1. To answer your enquiry and provide the information or quotation you asked for.
2. To take, confirm, and manage a booking — including allocating a property, providing check-in details, communicating during the stay, and handling changes, cancellations, and refunds.
3. To process payments, issue receipts and invoices, place and release damage deposits, and manage chargebacks and payment disputes.
4. To verify identity and prevent fraud, including confirming that the person booking is the cardholder and screening for fraudulent or high-risk bookings.
5. To assess a rental application and, if successful, to administer the tenancy.
6. To provide property management services to owners, including owner statements, remittances, maintenance coordination, and reporting.
7. To meet legal and regulatory obligations, including tax reporting and remittance (GST, PST and MRDT in BC; Transient Occupancy Tax in California), short-term rental registration and reporting obligations, and responding to lawful requests from authorities.
8. To operate, secure, and improve the website, and to understand which pages and properties are of interest.
9. To send you marketing communications, where you have consented — see Section 6.
10. To establish, exercise, or defend legal claims, including recovering unpaid amounts or damage to a property.

We do not use personal information for automated decision-making that produces a legal or similarly significant effect on you, other than automated fraud screening in step 4 — where a declined result can be reviewed by a person on request.

5. Payments

Payments are processed by Stripe Payments Canada Ltd. and its affiliates. When you pay, your card details are entered directly into Stripe’s systems. C Square never receives or stores your full card number, expiry date, or security code. We receive only the transaction result, the last four digits and card brand, the billing name and address, and Stripe’s fraud assessment.

Stripe processes this information as an independent controller under its own privacy policy, at stripe.com/privacy. Stripe stores and processes data in the United States and other countries.

Where a property owner is identified in your booking confirmation as the contracting party, funds may be routed to that owner and we act as their agent in collecting payment.

6. Marketing communications and your consent

We send commercial electronic messages only where we have your consent or another basis permitted under Canada’s Anti-Spam Legislation (CASL) — for example, an existing business relationship arising from a booking or a service agreement, which is time-limited under CASL.

Every commercial message we send identifies C Square, gives our contact details, and contains a working unsubscribe link or instruction. Unsubscribing takes effect within 10 business days.

SMS and WhatsApp. We use SMS and WhatsApp for service messages only — check-in instructions, access codes, maintenance notices, and replies to your questions — unless you have separately opted in to receive marketing on those channels. You can opt out of marketing messages at any time by replying STOP or contacting us.

Withdrawing consent. You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions and reasonable notice. Where withdrawal means we can no longer provide a service — for example, we cannot administer a booking without your contact and payment details — we will tell you before it takes effect. Withdrawing marketing consent does not stop transactional and service messages related to a live booking or tenancy.

7. Cookies and similar technologies

The website uses:

• Strictly necessary cookies, which make the site and booking process work. These cannot be turned off.
• Analytics cookies, which tell us how the site is used in aggregate.
• [Advertising and social media cookies, if any — otherwise delete this line and confirm no pixels are running.]

You can control cookies through your browser settings and through [the cookie banner / preference centre, if you have one]. Blocking cookies may prevent parts of the booking process from working.

Do Not Track. Some browsers transmit a “Do Not Track” signal. There is no common industry standard for responding to it, and our website does not currently respond to it.

8. Who we share personal information with

We share personal information only as described here. We do not sell personal information, and we do not disclose it to third parties for their own marketing.

Our accountability. Where we transfer personal information to a service provider for processing, we remain accountable for it. We use contractual and other means to require comparable protection. This is different from a link to another company’s website, where we are not responsible for their practices — see Section 13.

9. Where your information is stored

C Square is based in British Columbia, Canada. Several of our service providers store and process personal information outside Canada, including in the United States (Stripe, and our website and email infrastructure) and the European Union (Smoobu, based in Germany).

While personal information is in another country, it is subject to that country’s laws, and courts, law enforcement, and national security authorities in that country may be able to obtain access to it under that country’s laws. By using our services you acknowledge this transfer.

Questions about our practices regarding personal information stored outside Canada may be directed to our Privacy Officer (Section 15).

10. How long we keep it

We may retain information longer where required by law or where it is needed to establish, exercise, or defend a legal claim. When information is no longer needed we destroy, erase, or anonymise it.

11. Your rights

Everyone

• Access. Request a copy of the personal information we hold about you, how we have used it, and to whom we have disclosed it. We respond within 30 business days, or tell you if we need an extension.
• Correction. Ask us to correct information that is inaccurate or incomplete.
• Withdraw consent. See Section 6.
• Complain. Contact our Privacy Officer first (Section 15). If you are not satisfied, you may complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or, where PIPEDA applies, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

We may need to verify your identity before responding, and there are limited circumstances where the law permits us to refuse access — for example where doing so would reveal personal information about someone else, or would compromise a legal claim or an investigation. Where we refuse, we will tell you why.

Your California Privacy Rights

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the CPRA:

• Right to know the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties to whom we disclose it. The categories are set out in Sections 2, 3, 4, and 8 of this policy.
• Right to delete personal information we have collected from you, subject to exceptions — most relevantly, we must keep booking and payment records for tax purposes.
• Right to correct inaccurate personal information.
• Right to opt out of the “sale” or “sharing” of personal information, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we use sensitive personal information (payment data) only to perform the services you requested and for the purposes permitted under §7027(m) of the CCPA regulations.
• Right to non-discrimination. We will not deny you service, charge a different price, or provide a different quality of service because you exercised a privacy right.

To exercise these rights, contact us using the details in Section 15 and state that you are making a California privacy request. You may use an authorised agent; we will ask for proof of authorisation. We will verify your request against information we already hold.

Quebec, and other Canadian provinces

Residents of Quebec have additional rights under Quebec’s Law 25, including rights to data portability and to information about automated decisions. Contact our Privacy Officer to exercise them.

12. Security and privacy breaches

We take reasonable technical, physical, and organisational measures to protect personal information, including encryption in transit, access controls limited to staff who need the information for their role, vetting of service providers, and secure disposal. We keep full payment card data out of our systems entirely by using Stripe.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach occurs. If personal information in our custody is lost or accessed without authorisation and it is reasonable to believe the breach creates a real risk of significant harm to you, we will notify you directly and without unreasonable delay, describe what happened and what information was involved, tell you what we are doing, and tell you what you can do. We will notify the OIPC BC and any other regulator where required, and we keep records of breaches.

13. Links to other websites

Our website links to third-party sites, including listing platforms and payment pages. Those sites are controlled by others, and we are not responsible for their content or privacy practices. Read their privacy policies before providing information to them.

This is distinct from our own service providers in Section 8, for whom we remain accountable.

14. Children

The website and our services are intended for adults. In British Columbia the age of majority is 19; you must be at least 19 (or the age of majority where you reside, if higher) to make a booking or enter an agreement with us.

We do not knowingly collect personal information directly from children. Where a booking includes children, their names and — where a property has age-based occupancy limits — ages are provided by the booking adult and are used only for occupancy, safety, and property-suitability purposes. If you believe a child has provided us with personal information directly, contact our Privacy Officer and we will delete it.

15. Contact us — Privacy Officer

Questions, access requests, corrections, complaints, and consent withdrawals go to our Privacy Officer:

Privacy Officer — [NAME]
C Square Property Investment & Management
1100 – 1200 W 73rd Ave, Vancouver, BC V6P 6G5, Canada
Email: [email protected]
Phone: +1 (778) 872-1669

We acknowledge requests within 5 business days and respond substantively within 30 business days.

16. Changes to this policy

We may update this Privacy Policy. When we do, we will change the effective date and version number at the top. If a change is material, we will notify you by email (where we hold your address in connection with a live booking, tenancy, or management agreement) or by a prominent notice on the website, at least 14 days before it takes effect. Previous versions are available on request.