Last updated: August 20, 2021
WHAT IS PERSONAL INFORMATION?
“Personal information” is personally identifiable information such as your name, residential address and e-mail address and includes information about your mileage and reimbursement amounts.
COLLECTION AND USE OF PERSONAL INFORMATION
We collect personal information that you or your employer provide directly to us, including your name, contact information, payment information, and information about your vehicle (including your vehicle insurance). We use this information to provide the Services to you.
When you use our App, we will collect your personal information to provide vehicle reimbursement services. Using your Cardata account credentials, you will be able to log into the App and complete a setup process. Throughout the setup process, the App will display screens and information on enabling location collection and optimizing your device for automatic drive tracking. The App runs in the background to detect your driving based on movement and location information, and collects this information on a user-set schedule. The App will routinely check your schedule to ensure tracking is correctly set to “off” or “on”.
As you use the App, we collect data related to driven mileage and route logs. This data may include:
• device and operating system information;
• movement type;
• battery level; and
• Bluetooth connectivity.
The App uses your data to automatically detect when you are or are not driving. Precise location information will be collected if you opt in by both accepting your mobile device’s operating system requirements and enabling tracking through the App’s “Enable Tracking” button.
If you do not want us to collect your personal information through the App, please delete the App from your mobile device.
Disclosure of Personal Information
We may disclose your personal information as set out below or as otherwise required or permitted by law.
- Third Parties: We may request your consent to disclose your personal information (such as your name and email address) to third-parties, such as banks. If you consent to this disclosure, these third parties may use your personal information to improve their services, let you know about products and services that may be of interest to you by email or other means, or for any other purposes in accordance with their privacy policies. We are not responsible for the manner in which these third parties treat your personal information. If you wish to withdraw your consent to such sharing, you can email us at email@example.com.
- Service Provider Arrangements: We may disclose your personal information to third parties who provide services on our behalf. For example, we may use service providers to host our website, send email and text message communications (in accordance with applicable anti-spam laws), or process payments on our behalf. Our service providers are given the information they need to perform their designated functions, and we do not authorize them to use or disclose your personal information for their own marketing or other purposes. For additional information about the way in which our service providers treat your personal information, contact us as set out below.
- Sale of Business: We may transfer any information we have about you as an asset in connection with a proposed or completed merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Cardata or as part of a corporate reorganization or other change in corporate control.
- Legal and Compliance: Cardata and our Canadian and US service providers may disclose your personal information in response to a search warrant or other legally valid inquiry or order, or to an organization in the case of a breach of an agreement or contravention of law, or as otherwise required or permitted by applicable Canadian, US or other law. We may also disclose personal information where necessary for the establishment, exercise or defense of legal claims, to detect, prevent or suppress fraud, and to investigate or prevent actual or suspected loss or harm to persons or property.
Some of the persons to whom we may provide your personal information may be located in jurisdictions outside of Canada, including the United States. As a result, your personal information will be used, stored and/or accessed outside of Canada including in the United States and possibly other jurisdictions. Please note that when your personal information is located outside of Canada, it will be subject to the laws of the country in which it is situated and these jurisdictions may not have an equivalent level of data protection laws as those in Canada.
Cookies and Tracking Technologies
In addition to information you submit to us, we may collect certain information using automated tools such as cookies, web beacons, and web server logs as described below. The types of information we collect automatically may include IP addresses, device identifiers, browser characteristics, length of visits, and pages viewed. We may use this information to, for example, associate different devices that you use in connection with the Services.
As contemplated below, we may combine certain automatically collected information with other information we obtain about you, which may include data we obtain from third parties.
Data Analytics: We or our service providers (such as Google Analytics) collect the IP(Internet protocol) addresses and device identifiers of all users of the Services as well as other usage information such as page requests, browser type, operating system and average time spent using our Services. We use this information to help us understand your use of the Services, to monitor and improve the Services, and to tailor our Services for you and other users. For further information about how Google may use data it collects through the Website you may click here, or click here to learn more about opting out of Google Analytics data collection.
Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our Website is not designed to respond to “Do Not Track” signals received from browsers. To learn more about“Do Not Track” signals, you may wish to visit http://www.allaboutdnt.com/.
Tracer Tags & Web Beacons: We may also use a technology called "tracer tags" or "WebBeacons" on our Services. For example, we may use this technology in order to help us understand which pages you visit on our Website or which of our emails you view or interact with. This information helps us optimize and tailor our Services to you.
You may choose whether to receive some Interest-based advertising by submitting opt-outs. Some of the advertisers and service providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, visit http://www.aboutads.info/choices/, and http://www.aboutads.info/appchoices for information on the DAA’s opt-out program for mobile apps. Some of these companies may also be members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and your opt-out options for their members, see http://www.aboutads.info/appchoices. Please be aware that, even if you are able to opt out of certain kinds of Interest-based advertising, you may continue to receive other types of ads. Opting out only means that those selected members should no longer deliver certain Interest-based advertising to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI/DAA browser- based opt-out may not, or may no longer, be effective. Cardata supports the ad industry’s Self-regulatory Principles for Online Behavioral Advertising (https://www.iab.com/wp-content/uploads/2015/05/ven-principles-07-01-09.pdf) and expects that ad networks Cardata directly engages to serve you Interest-based advertising will do so as well, though we cannot guaranty their compliance. Cardata is not responsible for effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.
Additional Information About our Website & App
Children’s Privacy: Our Website is not intended for, nor targeted to, children under 13, and we do not knowingly or intentionally collect information from children under 13. If we learn that we have received information directly from a child who is under the age of 13, we will delete the information in accordance with applicable law.
Security of Personal Information
We maintain appropriate administrative, technical and physical safeguards designed to help protect personal information collected or received through our Website or App.
Where we use service providers who might have access to your personal information in order to assist us in offering and administering our Website or App, we require them to have privacy and security standards that are comparable to ours. We use contracts and other measures with our service providers to maintain the confidentiality and security of your personal information and to prevent it from being used for any other purpose.
Although we use reasonable efforts to safeguard information, transmission of information via the Internet and mobile platforms is not completely secure and we cannot guarantee the security of your information collected through our Website or App. Your online access to certain of your personal information may be protected with a password you select. We strongly recommend that you do not disclose your password to anyone and change your password on an appropriate frequency.
We have a personal information retention process designed to retain personal information for no longer than necessary for the purposes stated above or to otherwise meet legal requirements.
Access to your Personal Information
You have the right to access, update, and correct inaccuracies in your personal information in our custody and control, subject to certain exceptions prescribed by law. You may access, update and correct certain of your personal information through your account. You may request access, updating and corrections of inaccuracies in any other personal information in our custody or control by emailing or writing to us at the contact information set out below. We may request certain personal information for the purposes of verifying the identity of the individual seeking access to their personal information records.