Privacy policy

Last updated: August 20, 2021

Cardata Consultants Inc. (“Cardata,” “we,” “us,” or“our”) respects your privacy. This Privacy Policy sets out the manner in which Cardata collects, uses, discloses and otherwise manages your personal information. This Privacy Policy applies to the privacy practices of Cardata,including with respect to the Cardata Mobile mobile application (our “App”), the website https://www.cardata.co (the “Website”), and anywhere else it is posted (collectively, the “Services”).

WHAT IS PERSONAL INFORMATION?

Personal information” is personally identifiable information such as your name, residential address and e-mail address and includes information about your mileage and reimbursement amounts.

We may receive personal information from your employer and other third parties, provided that such parties confirm to us that they have obtained your consent to the disclosure of your personal information to us for the purposes contemplated in this Privacy Policy.

COLLECTION AND USE OF PERSONAL INFORMATION

Except as otherwise provided in this Privacy Policy, Cardata only collects and uses your personal information for the purpose of providing you with the products and services you or your employer have requested from us, which may include electronic funds payment.

 

We collect personal information that you or your employer provide directly to us, including your name, contact information, payment information, and information about your vehicle (including your vehicle insurance). We use this information to provide the Services to you.

 

When you use our App, we will collect your personal information to provide vehicle reimbursement services. Using your Cardata account credentials, you will be able to log into the App and complete a setup process. Throughout the setup process, the App will display screens and information on enabling location collection and optimizing your device for automatic drive tracking. The App runs in the background to detect your driving based on movement and location information, and collects this information on a user-set schedule. The App will routinely check your schedule to ensure tracking is correctly set to “off” or “on”.

 

As you use the App, we collect data related to driven mileage and route logs. This data may include:

• device and operating system information;

• location;

• speed;

•  altitude;

• movement type;

• battery level; and

• Bluetooth connectivity.

 

The App uses your data to automatically detect when you are or are not driving. Precise location information will be collected if you opt in by both accepting your mobile device’s operating system requirements and enabling tracking through the App’s “Enable Tracking” button.

 

If you do not want us to collect your personal information through the App, please delete the App from your mobile device.

 

Disclosure of Personal Information

We may disclose your personal information as set out below or as otherwise required or permitted by law.

  • Third Parties: We may request your consent to disclose your personal information (such as your name and email address) to third-parties, such as banks. If you consent to this disclosure, these third parties may use your personal information to improve their services, let you know about products and services that may be of interest to you by email or other means, or for any other purposes in accordance with their privacy policies. We are not responsible for the manner in which these third parties treat your personal information. If you wish to withdraw your consent to such sharing, you can email us at privacy@cardataconsultants.com.
  • Service Provider Arrangements: We may disclose your personal information to third parties who provide services on our behalf. For example, we may use service providers to host our website, send email and text message communications (in accordance with applicable anti-spam laws), or process payments on our behalf.  Our service providers are given the information they need to perform their designated functions, and we do not authorize them to use or disclose your personal information for their own marketing or other purposes. For additional information about the way in which our service providers treat your personal information, contact us as set out below.
  • Sale of Business: We may transfer any information we have about you as an asset in connection with a proposed or completed merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Cardata or as part of a corporate reorganization or other change in corporate control.
  • Legal and Compliance: Cardata and our Canadian and US service providers may disclose your personal information in response to a search warrant or other legally valid inquiry or order, or to an organization in the case of a breach of an agreement or contravention of law, or as otherwise required or permitted by applicable Canadian, US or other law. We may also disclose personal information where necessary for the establishment, exercise or defense of legal claims, to detect, prevent or suppress fraud, and to investigate or prevent actual or suspected loss or harm to persons or property.

Data Transfers

Some of the persons to whom we may provide your personal information may be located in jurisdictions outside of Canada, including the United States. As a result, your personal information will be used, stored and/or accessed outside of Canada including in the United States and possibly other jurisdictions.  Please note that when your personal information is located outside of Canada, it will be subject to the laws of the country in which it is situated and these jurisdictions may not have an equivalent level of data protection laws as those in Canada.

Cookies and Tracking Technologies

In addition to information you submit to us, we may collect certain information using automated tools such as cookies, web beacons, and web server logs as described below. The types of information we collect automatically may include IP addresses, device identifiers, browser characteristics, length of visits, and pages viewed. We may use this information to, for example, associate different devices that you use in connection with the Services.

As contemplated below, we may combine certain automatically collected information with other information we obtain about you, which may include data we obtain from third parties.

Data Analytics: We or our service providers (such as Google Analytics) collect the IP(Internet protocol) addresses and device identifiers of all users of the Services as well as other usage information such as page requests, browser type, operating system and average time spent using our Services. We use this information to help us understand your use of the Services, to monitor and improve the Services, and to tailor our Services for you and other users. For further information about how Google may use data it collects through the Website you may click here, or click here to learn more about opting out of Google Analytics data collection.

Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our Website is not designed to respond to “Do Not Track” signals received from browsers. To learn more about“Do Not Track” signals, you may wish to visit http://www.allaboutdnt.com/.

Cookies: When you visit our Website, we may use cookies. A cookie is a tiny element of data that is sent to your browser and may then be stored on your device. Cookies let us know who you are and provide us and our service providers with information that we use to personalize our Services in accordance with your preferences. You may set your browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies, you may not be able to take advantage of all of the features of our Services.

Tracer Tags & Web Beacons: We may also use a technology called "tracer tags" or "WebBeacons" on our Services. For example, we may use this technology in order to help us understand which pages you visit on our Website or which of our emails you view or interact with. This information helps us optimize and tailor our Services to you.

 

Targeted Advertising: Third parties (such as ad networks) may use cookies and other technologies to collect information about your use of our Website and other websites(such as web pages you visit and your response to ads) in order to deliver ads that are more relevant to you, both on and off our Website. You can opt-out of this form of targeted advertising from all or some of the companies listed on the Digital Advertising Alliance of Canada’s opt-out tool, available at: www.youradchoices.ca/choices.

You may choose whether to receive some Interest-based advertising by submitting opt-outs. Some of the advertisers and service providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, visit http://www.aboutads.info/choices/, and http://www.aboutads.info/appchoices for information on the DAA’s opt-out program for mobile apps. Some of these companies may also be members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and your opt-out options for their members, see http://www.aboutads.info/appchoices. Please be aware that, even if you are able to opt out of certain kinds of Interest-based advertising, you may continue to receive other types of ads. Opting out only means that those selected members should no longer deliver certain Interest-based advertising to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI/DAA browser- based opt-out may not, or may no longer, be effective. Cardata supports the ad industry’s Self-regulatory Principles for Online Behavioral Advertising (https://www.iab.com/wp-content/uploads/2015/05/ven-principles-07-01-09.pdf) and expects that ad networks Cardata directly engages to serve you Interest-based advertising will do so as well, though we cannot guaranty their compliance. Cardata is not responsible for effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

Additional Information About our Website & App

Third Party Links: Our Service may contain links to other websites or apps that Cardata does not own or operate. Except as provided herein, we will not provide any of your personal information to these third parties without your consent. We provide links to third party websites or apps as a convenience to the user. These links are not intended as an endorsement of or referral to the linked website or apps. The linked website or apps have separate and independent privacy statements, notices and terms of use, which we recommend you read carefully. We do not have any control over such third-parties, and therefore we have no responsibility or liability for the manner in which they operate such linked website or apps.

Children’s Privacy: Our Website is not intended for, nor targeted to, children under 13, and we do not knowingly or intentionally collect information from children under 13. If we learn that we have received information directly from a child who is under the age of 13, we will delete the information in accordance with applicable law.

Security of Personal Information

We maintain appropriate administrative, technical and physical safeguards designed to help protect personal information collected or received through our Website or App.

Where we use service providers who might have access to your personal information in order to assist us in offering and administering our Website or App, we require them to have privacy and security standards that are comparable to ours. We use contracts and other measures with our service providers to maintain the confidentiality and security of your personal information and to prevent it from being used for any other purpose.

Although we use reasonable efforts to safeguard information, transmission of information via the Internet and mobile platforms is not completely secure and we cannot guarantee the security of your information collected through our Website or App. Your online access to certain of your personal information may be protected with a password you select. We strongly recommend that you do not disclose your password to anyone and change your password on an appropriate frequency.

We have a personal information retention process designed to retain personal information for no longer than necessary for the purposes stated above or to otherwise meet legal requirements.

Access to your Personal Information

You have the right to access, update, and correct inaccuracies in your personal information in our custody and control, subject to certain exceptions prescribed by law. You may access, update and correct certain of your personal information through your account. You may request access, updating and corrections of inaccuracies in any other personal information in our custody or control by emailing or writing to us at the contact information set out below. We may request certain personal information for the purposes of verifying the identity of the individual seeking access to their personal information records.

Changes to the Privacy Policy

This Privacy Policy may be updated periodically to reflect changes to our personal information practices. We will provide you with notice of these changes by posting the revised Privacy Policy on our Website and in our App. In some cases, we may also email you notice of such changes. We strongly encourage you to please refer to this Privacy Policy often for the latest information about our personal information practices.

Contact Us

Please contact our Privacy Officer at privacy@cardataconsultants.com if you have any questions or comments about this Privacy Policy, including our use of service providers outside of Canada, if you wish to access, update, and/or correct inaccuracies in your personal information or you otherwise have a question or complaint about the manner in which we or our service providers treat your personal information.