Privacy Policy

Who is responsible

Apex Path Logistiks is the organization responsible for the personal information described here. We operate from 205 Wynford Drive, North York, Toronto, ON M3C 3P4.

We have designated a Privacy Officer who is accountable for our compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You can reach them at privacy@apexlogistiks.com, or by post at the address above.

What we collect

Only two forms on this site collect personal information, and only the fields listed below are stored. There is no account system, no newsletter sign-up and no third-party form embedded anywhere on the site.

Driver applications collect:

• Your name, email address, phone number and the city you want to drive in
• Your date of birth, which we use to confirm you meet the minimum age to drive with us and to identify you to the background-check provider
• The licence classes you hold, your years of driving experience, whether you own a vehicle and what type, the service you prefer, the days you can work and your preferred shift
• A record that you consented, which version of the consent wording you agreed to, and when

What quote requests collect

Quote requests collect:

• Your company name, your name, your work email address and your phone number
• Your industry, the pickup and delivery locations, your weekly volume, package type, average weight and preferred start date
• Any notes you choose to add
• A record that you consented, which version of the consent wording you agreed to, and when, plus whether you opted in to marketing email

Technical information

Both forms also record a shortened version of your IP address, the country your request came from, and a truncated copy of your browser user-agent string. We use these to spot automated abuse of the forms and for nothing else.

The IP address is truncated before it is stored: for IPv4 the final octet is dropped, and for IPv6 everything after the first three groups is dropped. That is enough to tell repeated abuse apart, and not enough to identify a single connection. Your full IP address is held only in a short-lived rate-limiting counter that is deleted an hour after your submission.

The shortened IP address, the country and the user-agent string are erased from your record 90 days after you submit it. The rest of the record is unaffected.

Why we collect it

Driver application data is used to assess whether you are suitable to drive for us, to obtain your driving record and run the background check you consent to on the last step of the application, and to contact you about the outcome.

Quote request data is used to price the lanes you describe and to send you that pricing.

If you tick the optional marketing box on either form, we will also send you occasional service updates and offers by email. That box is separate, it is never pre-ticked, and leaving it unticked has no effect on your application or your quote.

We do not sell personal information, we do not share it with advertisers, and we do not use it to build profiles or to make automated decisions about you.

Consent, and withdrawing it

We collect this information with your knowledge and consent, given by submitting the form after reading the consent wording shown next to the submit button.

You can withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent to the driving-record and background check means we cannot progress your application. Withdrawing consent to marketing email only stops the marketing email; use the unsubscribe link in any message we send, or write to us.

To withdraw consent, write to privacy@apexlogistiks.com.

Where it is stored

Records are stored in a Cloudflare D1 database. The application does not accept file attachments, so we hold no copies of your licence or any other document you have not sent us directly.

Cloudflare, Inc. processes this data on our behalf as a service provider. Cloudflare operates a global network, which means your information may be stored or processed outside Canada, including in the United States, and while it is there it is subject to the laws of that country, including lawful access requests by foreign courts and authorities.

We use contractual means to require a comparable level of protection from our service providers while they hold information on our behalf. If you want to know more about our practices around transfers to service providers, write to our Privacy Officer.

We also keep encrypted backups of the database with GitHub, Inc. so that records can be recovered if the Cloudflare account itself becomes unavailable. Those copies are encrypted before they leave Cloudflare, GitHub cannot read them, they are held for no more than 90 days, and they may be stored outside Canada.

Who can see it

Access is limited to Apex Path operations staff who need it to process your application or your request. The staff area is behind a password and a signed session that expires after twelve hours, and the guard runs again on every route that reads applicant data.

We disclose personal information outside the organization only to the background-check provider you consent to on the application form, and where we are required to by law.

How long we keep it

Applications that do not lead to an engagement are deleted within twelve months of the decision.

Quote requests are kept for twenty-four months, so that we can honour pricing we quoted and answer follow-up questions about it.

The technical fields described above are erased after 90 days regardless of how long the rest of the record is kept.

Records of consent are kept for three years after the consent is withdrawn or expires, because we have to be able to show that consent was given.

Keeping it safe

The database is reachable only from the application itself. Admin sessions are signed and time-limited, and the site is served over HTTPS with a content security policy that blocks scripts, frames and connections to anywhere other than this site.

No safeguard is perfect. If a breach ever creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you, as PIPEDA requires.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or ask us how it has been used and who it has been disclosed to.

Write to privacy@apexlogistiks.com. We will respond within thirty days. There is no charge for a routine request, and if a request would cost anything we will tell you before we do the work.

We may need to confirm your identity before we act, so that we are not handing your information to somebody else.

If you are not satisfied with how we handled your request, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or on 1-800-282-1376.

Cookies and tracking

This site sets no analytics, advertising or tracking cookies, and loads no third-party scripts, pixels, fonts or embeds. The only cookie it ever sets is the session cookie for the staff area.

The cookie policy sets this out in full.

Changes

If we change this notice we will update the date at the top of the page. Where a change materially affects how we use information you have already given us, we will contact you before it takes effect.