Privacy Policy

1. Introduction

ChaufX Inc. explains in this policy how personal information is collected, used, disclosed, and protected in connection with the ChaufX website, customer app, driver app, and related services.

The policy is intended to align with PIPEDA and applicable Canadian provincial privacy legislation, including Quebec Law 25 and the privacy statutes in British Columbia and Alberta.

By using the services, users consent to the collection, use, and disclosure practices described in this policy.

2. Definitions

• Customer: an individual who creates a customer account and uses the services to book driving or related assistance.
• Driver: an independent contractor engaged through the services to provide driving and related assistance.
• Personal Information: information about an identifiable individual, including contact details, booking data, device identifiers, geolocation, payment details, identity documents, and screening results.
• Sensitive Information: information that requires higher protection, including financial data, government-issued identification, SIN, criminal record information, health or mobility details, and precise geolocation.
• Consent: voluntary agreement to collection, use, and disclosure for identified purposes.

3. Information We Collect

• Customer account information such as name, email, phone number, date of birth, booking details, vehicle details, communications, ratings, reviews, and uploaded photos.
• Driver onboarding information such as legal name, address, driver’s licence, driving abstract, insurance documents, identity documents, payout information, SIN for limited verification purposes, HST or GST registration number, headshot, and performance data.
• Automatic data such as device type, operating system, browser type, unique identifiers, usage data, IP address, approximate location, crash reports, and analytics information.
• Precise geolocation from the customer app during bookings and from the driver app while drivers are on duty, where device permission has been granted.
• Device permissions such as location, camera, photos or media library, push notifications, contacts where applicable, and microphone where in-app voice messaging is used.

4. Purposes for Collection

• To provide, operate, maintain, and improve the services.
• To create and manage customer and driver accounts.
• To match customers with available drivers and support bookings and vehicle checks.
• To process payments, payouts, and taxes.
• To conduct background screening, identity verification, and driving abstract checks for drivers.
• To communicate transactional updates, support responses, safety alerts, and marketing where express consent has been given.
• To investigate incidents, prevent fraud, enforce platform rules, support analytics, and comply with legal obligations.

5. Consent

ChaufX obtains consent before or at the time personal information is collected. Consent may be express or implied depending on the context and the reasonable expectations of the user.

Express consent is obtained before collecting, using, or disclosing sensitive information such as criminal record results, SIN, precise geolocation, and payment information, and before sending marketing communications under CASL.

Users may withdraw consent at any time, subject to legal or contractual limits, though this may limit access to some or all services.

6. Limiting Collection

ChaufX limits collection to the information necessary for the identified purposes and collects personal information by fair and lawful means.

7. Use, Disclosure, and Retention

• Personal information is used only for the purposes identified in the policy or for purposes a reasonable person would consider appropriate.
• Limited information is shared between customers and assigned drivers to enable a booking, such as first name, booking locations, instructions, driver photo, rating, and approximate location during the trip.
• Service providers may receive personal information where needed to support hosting, payments, background checks, identity verification, mapping, notifications, analytics, and support services.
• Information may also be disclosed to advisors, acquirers, courts, regulators, law enforcement, insurers, and others where permitted by law or where consent has been given.
• Indicative retention periods include up to seven years for account and booking records, up to two years after driver engagement for background check results, limited retention for SIN, and shorter retention for geolocation logs and support communications.

8. Safeguards

• Encryption of data in transit and at rest.
• Secure cloud storage.
• Need-to-know access controls.
• Multi-factor authentication for administrative access.
• Contractual protections with service providers.
• Regular security assessments, monitoring, and a documented breach response process.

9. International Transfers

Personal information may be stored or processed in Canada, the United States, or other jurisdictions where ChaufX or its service providers operate. ChaufX takes steps to ensure transferred information remains protected in line with this policy and applicable law.

10. Accuracy, Access, Correction, Deletion, and Portability

• Users may request access to the personal information held about them, subject to legal exceptions.
• Users may request corrections if information is inaccurate, incomplete, or out of date.
• Users may request deletion of an account and related information, subject to legal retention obligations and unresolved bookings or disputes.
• Where required by law, users may request a portable copy of information they provided in a structured, commonly used, machine-readable format.

11. Cookies and Similar Technologies

ChaufX uses cookies and similar technologies on the website to recognize devices, provide core features, analyze performance, personalize experiences, and support analytics. Users can manage preferences through browser settings, though disabling cookies may limit website functionality.

12. Children’s Privacy

The services are intended for users who are at least eighteen years old, or the age of majority where higher. ChaufX does not knowingly collect personal information from children and will delete such information if discovered.

13. Breach Notification

Where a security breach involving personal information creates a real risk of significant harm, ChaufX will notify the Office of the Privacy Commissioner of Canada, applicable provincial regulators where required, affected individuals as soon as feasible, and maintain legally required breach records.

14. Quebec Law 25 Disclosures

• ChaufX has designated a person in charge of the protection of personal information.
• Privacy impact assessments are conducted for new technology projects where required.
• Eligible Quebec residents may request de-indexing of certain personal information links where Law 25 conditions are met.
• Complaints may be filed with the Commission d’accès à l’information du Québec.

15. Business Transfers

If ChaufX or substantially all of its assets are acquired, assigned, merged, financed, or otherwise transferred, personal information may be transferred as part of that transaction, subject to continued privacy protections.

16. Changes to the Privacy Policy

ChaufX may update the privacy policy to reflect changes in practices, technology, law, or operations. Material changes may be communicated on the website, through the services, or by email. Continued use after posting means acceptance of the revised policy.

17. Authorized Users and Account Sharing

Where an account holder adds an authorized user, the account holder represents that they have authority to do so and, where necessary, the authorized user’s consent. ChaufX relies on account holders to inform authorized users about how their information will be stored and handled.

18. Complaints and Contact

Privacy complaints may be submitted to ChaufX’s Privacy Officer. ChaufX will investigate and respond within a reasonable time. Users may also complain to the Office of the Privacy Commissioner of Canada and applicable provincial regulators.

• Address: ChaufX Inc., 2 Simcoe Street South, Suite 300, Oshawa, Ontario L1H 8C1
• Email: privacysupport@chaufx.ca
• Phone: +1 (647) 919-7237