ShipFlo Inc. (“ShipFlo”, “we”, “our”, “us”) values your trust. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access our website, merchant dashboard, driver app, or any related services (collectively, the “Platform”).
By using ShipFlo, you agree to this Privacy Policy and consent to our data practices described below.

1. Overview

ShipFlo is a Canadian delivery-as-a-service platform connecting local merchants, drivers, and customers for on-demand and same-day deliveries. We handle business information (merchant accounts, delivery data) and limited personal information (driver identity, contact details, delivery recipient info) necessary for service fulfillment.
We comply with:

• PIPEDA (Canada’s Personal Information Protection and Electronic Documents Act)
• Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA)
• CASL (Canadian Anti-Spam Legislation)

2. Information We Collect

We collect information directly from you and automatically through your use of the Platform.

A. Information You Provide

• Merchant Data: Business name, address, email, contact person, payment info, delivery preferences.
• Driver Data: Name, driver’s licence, vehicle information, insurance details, contact info, bank account for payouts.
• Customer Data: Recipient name, delivery address, phone number, delivery notes, and proof of receipt (signature, photo).
• Payment Details: Billing address, payment card info, and transaction history (processed through secure third-party gateways).
• Support & Communication: Messages sent to support@shipflo.ca or through WhatsApp, SMS, or live chat.

B. Automatically Collected Data

• Device & Usage Data: IP address, browser type, mobile OS, time zone, and activity logs.
• Location Data: Real-time GPS coordinates during delivery operations for route optimization, proof of delivery, and fraud prevention.
• Cookies & Tracking: We use cookies and analytics tools to improve performance and personalize the user experience.

3. How We Use Your Information

We use your information only for purposes directly related to service operation and compliance, including:

• Providing and managing deliveries between merchants, drivers, and recipients.
• Processing payments and invoices.
• Verifying driver and merchant identity.
• Improving and personalizing platform performance.
• Complying with regulatory, tax, and audit requirements.
• Communicating updates, alerts, and support notifications.
• Investigating fraud, unauthorized access, or service misuse.

We do not sell or rent your personal data to any third party.

4. Sharing and Disclosure

We may share your information only under the following conditions:

A. Service Providers

We use reputable third-party providers for:

• Payment processing (e.g., Stripe, Moneris, Square)
• Cloud hosting and analytics (e.g., AWS, Firebase, PostHog, Google Analytics)
• Customer communication (e.g., Twilio, WhatsApp Business API, Interakt)

These providers are bound by contractual confidentiality and data protection agreements.

B. Legal and Compliance

We may disclose data when required by law, regulation, or legal process (e.g., CRA audits, court orders), or to enforce ShipFlo’s Terms of Service.

C. Business Transfers

If ShipFlo merges, acquires, or sells business assets, your information may be transferred as part of that transaction, subject to confidentiality protections.

5. Data Retention

We retain information only as long as necessary to:

• Fulfill deliveries and service obligations,
• Comply with financial and legal recordkeeping,
• Resolve disputes or enforce agreements.

Inactive accounts may be deleted or anonymized after 24 months of inactivity unless retention is required by law.

6. Data Security

ShipFlo uses industry-standard safeguards to protect your data, including:

• 256-bit SSL encryption for data transmission,
• Encrypted databases hosted on Canadian or SOC2-compliant servers,
• Multi-factor authentication for admin and merchant access,
• Regular audits and vulnerability monitoring.

While we take strong precautions, no online system is 100% secure. Users share information at their own risk.

7. Your Rights

Under Canadian privacy law, you have the right to:

• Access and review your personal information,
• Request correction of inaccurate data,
• Withdraw consent for marketing communications,
• Request deletion of data (subject to legal obligations).

To exercise these rights, contact privacy@shipflo.ca with your name, account email, and request details.

8. Cookies and Analytics

We use cookies and analytics tools (e.g., Google Analytics, PostHog) to understand usage trends, improve navigation, and measure campaign effectiveness.
You can manage cookies through your browser settings.

9. Communications and Marketing

By creating a ShipFlo account, you consent to receive essential service communications (e.g., invoices, order confirmations).
Marketing or promotional emails require express consent and include an unsubscribe option in every message.
We comply fully with Canada’s Anti-Spam Legislation (CASL).

10. Third-Party Links

ShipFlo may link to third-party websites or integrations (e.g., Shopify, WooCommerce).
We are not responsible for their privacy practices or content.
We recommend reviewing each platform’s policy before sharing information.

11. Children’s Privacy

ShipFlo is not intended for individuals under 18 years of age.
We do not knowingly collect personal information from minors. If you believe a child has provided data, please contact us for immediate removal.

12. International Data Transfers

Although ShipFlo primarily stores data within Canada, some third-party processors (e.g., AWS, Google Cloud) may store or process data outside Canada.
In such cases, those jurisdictions may have different data protection laws, but ShipFlo ensures equivalent contractual safeguards.

13. Changes to this Policy

We may update this Privacy Policy periodically to reflect service, legal, or regulatory changes.
Updates will be posted at www.shipflo.ca/privacy, and the “Last Updated” date will be revised.
Continued use after updates means you accept the revised policy.

14. Contact Us

For privacy inquiries, access requests, or complaints, please contact:
ShipFlo Inc.

Contact@shipflo.ca

www.shipflo.ca

If unresolved, you may also contact the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca

15. Acknowledgement

By using ShipFlo, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of personal information as described.