Chauffeuropolis Inc.

Privacy Policy

Effective 27 May 2025

***Plain‑English version first. Boiler‑plate legal detail follows.***

Our promise is simple:

Collect only what we need to move you from A to B.
Guard it like a vault.
Never sell it. Ever.
Give you full control to see, fix, download or delete your data.

If that is all you came for, you are good to go. The rest spells out the fine print required by Canadian, US and EU privacy law.

1 SCOPE

This Policy applies to personal information collected when you book, use or visit any Chauffeuropolis service or the website https://chauffeuropolis.com (the “Site”). It does not cover third‑party sites we link to or offline records unrelated to bookings.

2 WHO WE ARE

Chauffeuropolis Inc.

Mailing Address: 200 King Street W, Hamilton, ON L8P 4S4

Email: info@chauffeuropolis.com

Phone: +1 289 555 0199

3 WHAT WE COLLECT AND WHY

Data category	Examples	Purpose	Legal basis*
Identity	Name, email, phone, billing address	Confirm bookings, send confirmations, driver contact	Contract fulfilment
Journey	Pick‑up, drop‑off, flight number, luggage notes	Route planning, driver dispatch, customs compliance	Contract fulfilment
Device & log	IP, browser, referral URL, time‑stamp	Site security, fraud detection, analytics	Legitimate interest
Marketing	Email preferences, survey responses	Send promos with consent	Consent
Payment	Tokenised card ID, last 4 digits	Process fares, refunds	Contract fulfilment
Comms	Chat transcripts, emails, call recordings	Customer service quality, dispute resolution	Legitimate interest

*GDPR Art. 6 equivalents. For Californians, these map to CCPA “business purposes.”

4 COOKIES & TRACKING

We use first‑party cookies for session management and Google Analytics 4 for anonymous traffic stats. Ad remarketing tags load only if you accept marketing cookies in our banner. Cookie shelf‑life: 14 days max. Opt‑out any time in the banner or by clearing browser cookies.

5 THIRD‑PARTY DISCLOSURE

We share only with:

Payment processors (Stripe, Square) – PCI‑DSS compliant
Email & SMS gateways (Twilio, Mailgun)
Analytics vendors (Google)
Municipal regulators or law‑enforcement when legally compelled

Every vendor signs a data‑processing addendum binding them to PIPEDA, GDPR and CCPA standards.

6 INTERNATIONAL TRANSFERS

Data may transit through US‑hosted services. We use Standard Contractual Clauses with EU/UK residents and rely on the PIPEDA adequacy finding for Canadian data.

7 RETENTION

Booking records – 7 years (tax law)

Marketing consents – until withdrawn

Log files – 12 months

CCTV in vehicles (if fitted) – 30 days unless flagged for incident review

8 SECURITY

TLS 1.3 everywhere
AES‑256 encryption at rest
Role‑based access controls
Annual penetration testing

If we suffer a breach posing real risk, we notify you and the Office of the Privacy Commissioner within 72 hours.

9 YOUR RIGHTS

Canada (PIPEDA)

Access, correction, withdrawal of consent, file a complaint.

EU / UK (GDPR)

Access, rectification, erasure, restriction, portability, objection, lodge complaint with your DPA.

California (CCPA / CPRA)

Know, delete, correct, opt‑out of sale or sharing. No data sale performed, but you can still submit a request.

How to exercise

Email info@chauffeuropolis.com with subject “Privacy Request.” We verify identity then reply within 30 days.

10 CHILDREN

We do not knowingly collect data from children under 13. If a parent believes we have done so, contact us immediately for deletion.

11 MARKETING & CASL COMPLIANCE

Commercial emails include an unsubscribe link and our mailing address. Opt‑out is immediate. No email = no marketing.

12 CHANGES

We may update this Policy. Material changes trigger 30‑day advance notice via email or Site banner. New version becomes effective on the date posted.

13 LEGAL CLAUSES (BORING BUT NECESSARY)

This Policy is governed by the laws of Ontario and federal Canadian privacy law.

Venue for disputes – Ontario Superior Court of Justice.

Severability – If any clause is invalid, the remainder stands.

Definitions mirror those in PIPEDA, GDPR and CCPA.

Continued use after an update equals acceptance.

End of Policy.

Contact Information