Privacy Policy

RunSmart Logistics Inc.("RunSmart", "we", "us", or "our") is committed to protecting the privacy of individuals who interact with our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

By using our website at runsmartlogistics.com or submitting a quote or contact request, you consent to the practices described in this policy.

1. Who We Are

RunSmart Logistics Inc. is a cargo van delivery company operating in the Greater Toronto Area, Ontario, Canada. Our principal place of business is:

2. Information We Collect

We collect personal information only when you voluntarily provide it to us. This includes:

a) Quote Requests

• Full name and company name
• Business email address and phone number
• Pickup and delivery addresses (within Ontario)
• Shipment details (cargo type, size, weight, urgency)
• Preferred service and scheduling preferences
• Marketing consent status and timestamp

b) Contact Form Submissions

• Full name, company name, and email address
• Subject and message content

c) Website Usage Data

With your consent, we collect anonymized usage data through Google Analytics 4 and Microsoft Clarity (heatmaps and session recordings). This may include IP address, browser type, pages visited, time on site, and referring URL. This data is used only in aggregate form to improve the website.

d) Technical Data

Our server infrastructure may automatically log standard technical information such as IP address, HTTP request metadata, and timestamps for security and rate-limiting purposes. This data is not linked to identifiable individuals and is purged on a rolling basis.

3. How We Use Your Information

• Responding to quote requests and providing delivery service estimates
• Responding to general enquiries and customer support
• Sending a confirmation email when you submit a quote or contact form
• Sending promotional or service communications, only if you have opted in (CASL-compliant)
• Improving our website, services, and customer experience
• Complying with legal obligations and enforcing our Terms of Service

We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and Tracking

We use a cookie consent banner to obtain your explicit consent before activating any analytics or tracking cookies. You may accept or decline at any time:

• Essential cookies - Required for site security and form functionality. Always active; no consent required.
• Analytics cookies (Google Analytics 4) - Activated only after consent. Used to measure traffic and improve site content. Data is anonymized (IP anonymization enabled).
• Behaviour analytics (Microsoft Clarity) - Activated only after consent. Records anonymized session data (no passwords or payment details are recorded).

You can withdraw cookie consent at any time by clearing your browser cookies or using your browser's privacy controls. Withdrawal of consent does not affect the lawfulness of prior processing.

5. Disclosure to Third Parties

We do not sell, rent, or trade your personal information. We share information only with trusted service providers who assist us in operating our business, all of whom are bound by confidentiality obligations:

• Supabase Inc. - Cloud database (PostgreSQL) for storing quote requests and contact submissions. Data may be stored on servers in the United States.
• Vercel Inc. - Website hosting and serverless functions. Data processed through their CDN infrastructure.
• Google LLC - Email delivery (Google Workspace SMTP) and analytics (Google Analytics 4). Subject to Google's privacy policy.
• HubSpot Inc. - CRM platform for managing quote leads and business contacts. Information shared only for companies and individuals who have submitted a quote request.
• Microsoft Corporation - Website behaviour analytics (Microsoft Clarity). Activated only with your consent.
• Cloudflare Inc. - Bot protection (Turnstile), DDoS mitigation, and DNS. Processes request metadata but does not store form data.

We may also disclose personal information where required by law, court order, or government authority.

6. Data Retention

• Quote requests - Retained for 3 years from the date of submission for business records and service follow-up purposes.
• Contact form submissions - Retained for 1 year.
• Analytics data - Aggregated data retained per Google and Microsoft default retention periods (14 months for GA4 user data by default).

You may request earlier deletion at any time (see Section 8).

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including:

• HTTPS (TLS) encryption for all data in transit
• Row-Level Security (RLS) policies in our database - anonymous users cannot read stored submissions
• Rate limiting and bot protection on all form submission endpoints
• Access controls limiting database access to authorized personnel only
• Regular dependency auditing via GitHub Dependabot

No method of electronic storage or transmission is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

8. Your Rights Under PIPEDA

• Access - Request a copy of the personal information we hold about you
• Correction - Request correction of inaccurate or incomplete information
• Withdrawal of consent - Withdraw consent to the use of your information for marketing purposes at any time, without affecting service delivery
• Deletion - Request deletion of your personal information, subject to our legal retention obligations
• Complaint - Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

To exercise any of these rights, contact us at info@runsmartlogistics.com. We will respond within 30 days.

9. Marketing Communications (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We will only send commercial electronic messages if you have provided express consent by checking the marketing opt-in on our quote form. You may unsubscribe at any time by:

• Clicking the unsubscribe link in any marketing email
• Emailing us at info@runsmartlogistics.com with "Unsubscribe" in the subject line

Transactional emails (quote confirmations, replies to your enquiries) are not marketing communications and do not require separate consent.

10. Cross-Border Data Transfers

Some of our service providers (Supabase, Vercel, Google, HubSpot, Microsoft) are based in or process data in the United States. When your information is transferred outside Canada, it may be subject to the laws of the destination country. By submitting information to us, you acknowledge this transfer.

11. Children's Privacy

Our services are directed exclusively to businesses (B2B). We do not knowingly collect personal information from individuals under 18 years of age.

12. Accessibility

This Privacy Policy is provided in plain language in compliance with the Accessibility for Ontarians with Disabilities Act (AODA). If you require this policy in an alternative format, contact us at info@runsmartlogistics.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the date of the most recent revision. Material changes will be communicated by posting a notice on our website.

14. Contact Us

For privacy-related questions, access requests, or complaints, contact our Privacy Officer:

This policy should be reviewed by qualified legal counsel before relying on it for compliance purposes.