Privacy Policy

Drive All Auto ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our vehicle transport services.

This policy complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Bill 64.

1. Information We Collect

A) Information You Provide Directly

When you request a quote, book a service, or contact us, we may collect:

• Contact Information: Name, email address, phone number
• Vehicle Information: Year, make, model, VIN, condition, pickup/delivery locations
• Service Details: Transport dates, special requirements, booking preferences
• Payment Information: Billing details (processed securely through third-party payment processors)
• Driver Portal Data: If you're a driver, we collect email, password (encrypted), and load information

B) Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies:

• Google Analytics: IP address (anonymized), browser type, device type, pages visited, time spent on pages, referring website, geographic location (city/province level)
• Cookie Data: Cookie ID, consent preferences, session information
• Technical Data: Operating system, screen resolution, language preferences

C) Information We Do NOT Collect from Public Website

When you submit a quote request through our website contact form, we do not store your information in our database. The form data is sent directly to our business email (driveallauto@outlook.com) via our email service provider (Resend). While we do not retain this data on our servers, Resend may temporarily store email delivery logs as part of their email infrastructure.

2. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Provide vehicle transport quotes and services
• Communicate pickup and delivery details
• Process payments and issue invoices/receipts
• Manage driver assignments and load tracking

Communication

• Respond to inquiries and customer service requests
• Send booking confirmations and updates
• Send driver portal invitations (for authorized drivers only)
• Provide important service notifications

Analytics and Improvement

• Analyze website traffic and user behavior (Google Analytics)
• Improve our website, services, and customer experience
• Identify technical issues and optimize performance

Legal Compliance

• Comply with legal obligations and regulatory requirements
• Maintain audit logs for security purposes (driver portal only)
• Protect against fraud, abuse, and security threats

3. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us understand how you use our site and improve your experience.

Types of Cookies We Use

Managing Cookies

You can control cookies through:

• Our Cookie Banner: Accept or decline analytics cookies when you first visit our site
• Browser Settings: Most browsers allow you to block or delete cookies (see your browser's help section)
• Google Analytics Opt-Out: Install the Google Analytics opt-out browser add-on

4. Third-Party Services

We use the following third-party services that may collect or process your information:

Google Analytics

• Purpose: Website traffic analysis and performance monitoring
• Data Collected: Anonymized IP addresses, browser info, pages visited, session duration
• Data Location: Google servers (may include U.S. and other countries)
• Privacy Policy: Google Privacy Policy
• Consent Required: Yes (only loaded if you accept cookies)

Resend (Email Service)

• Purpose: Transactional email delivery (quote confirmations, driver invitations)
• Data Collected: Email addresses, email content, delivery status
• Data Location: Resend servers (U.S.)
• Privacy Policy: Resend Privacy Policy
• Use Case: Sending quote confirmations and driver portal invitations only

Vercel (Website Hosting)

• Purpose: Website hosting and content delivery
• Data Collected: Server logs (IP addresses, request URLs, timestamps)
• Data Location: Vercel edge network (global CDN)
• Privacy Policy: Vercel Privacy Policy

5. Data Storage and Location

Driver Portal Data (Canada)

Driver portal data (driver accounts, load information, earnings) is stored in a PostgreSQL database located in Canada to comply with Canadian privacy laws. This data never leaves Canadian servers.

Quote Form Data (Not Stored in Our Database)

Quote requests submitted through our website contact form are not stored in our database. They are sent directly to our business email via Resend. Resend may retain email delivery logs according to their data retention policy.

International Data Transfers

Some third-party services (Google Analytics, Resend, Vercel) may process data outside of Canada, including in the United States. These services have privacy policies and security measures in place, but data protection laws may differ from Canadian standards.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

• Email Communications: Retained in our email system according to our business record retention policy (typically 2-7 years for invoices and service records)
• Driver Portal Data: Retained while driver is active, plus 7 years for accounting/tax purposes
• Google Analytics Data: Retained for 26 months (Google's default), then automatically deleted
• Audit Logs: Retained for 2 years for security purposes
• Quote Form Submissions: Not stored in our database. Resend (our email service) may retain delivery logs according to their retention policy

7. Your Privacy Rights Under PIPEDA

Under Canadian privacy law, you have the right to:

Access

Request a copy of the personal information we hold about you (driver portal accounts, service records, emails).

Correction

Request correction of inaccurate or incomplete personal information.

Deletion

Request deletion of your personal information, subject to legal retention requirements (e.g., tax records must be kept for 7 years).

Withdrawal of Consent

Withdraw consent for analytics cookies at any time (note: this may limit website functionality).

Lodge a Complaint

File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

8. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: HTTPS/TLS for all website connections
• Password Security: Bcrypt hashing for driver portal passwords (10 rounds)
• Access Control: Driver portal data is restricted by role-based permissions
• Audit Logging: All authentication events are logged for security monitoring
• Database Security: PostgreSQL with parameterized queries to prevent SQL injection
• Account Lockout: Driver accounts are locked after 5 failed login attempts

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised.

Significant changes will be communicated through a notice on our website or via email (for driver portal users).

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

12. Office of the Privacy Commissioner of Canada

If you are not satisfied with our response to your privacy concerns, you may contact the Office of the Privacy Commissioner of Canada:

• Website: www.priv.gc.ca
• Toll-Free: 1-800-282-1376
• Email: info@priv.gc.ca