Privacy policy
This policy explains how MyLocalMechanic BC collects, uses and discloses personal information, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). [Operating entity, registered address and – if applicable – extra-provincial registration in BC – TO COMPLETE. Operator: MyLocalMechanic BC, 1 188th Street, Pitt Meadows, BC, Canada.]
Privacy officer
Our privacy officer is accountable for this policy. Contact: [name, email and mailing address – TO COMPLETE].
What we collect
- Account details: name, email, phone, password (stored as a secure hash, never in plain text)
- Booking details: vehicle year, make and model, optional VIN, address, postal code, notes
- Mechanic applications: business details, coverage area, declarations and documents you upload
- Technical data: IP address for security and login protection
Why we use it (and your consent)
- To provide quotes and bookings you ask for
- To share your booking details with the mechanic doing the job
- To prevent fraud and keep accounts secure
- To send service emails about your booking. We only send commercial electronic messages (marketing) with your express consent, as required by Canada's Anti-Spam Legislation (CASL), and every one includes an unsubscribe link.
By using the service you consent to these purposes. You can withdraw consent at any time, subject to legal or contractual limits – but we may then be unable to provide a booking.
Who we share it with
The mechanic assigned to your booking; our payment provider (Stripe) when payments go live; our hosting and email providers. We never sell your personal information.
Storage outside Canada
The platform is operated from the United Kingdom and some of our service providers may store or process information outside Canada (for example in the UK, the EU or the United States). Information held outside Canada may be accessible to courts and authorities there. [List providers and locations – TO CONFIRM.]
How long we keep it
Booking records for [7] years for tax and legal reasons; other information for as long as your account is open, then deleted or anonymized. [TO CONFIRM.]
Safeguards
Encrypted connections (HTTPS), hashed passwords, access limited to people who need it, and uploaded documents stored outside the public website.
Breaches
If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and report it to the Office of the Privacy Commissioner of Canada as PIPEDA requires.
Your rights
You can ask to access or correct your personal information, or withdraw consent, by contacting us. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).