Privacy
Policy

At U-Dig It Rentals Inc. ("U-Dig It Rentals," "we," "us," or "our"), we respect your privacy and are committed to protecting the personal information you entrust to us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our services. By using our site and services, you agree to the terms described in this Policy.

Use of our platform is also governed by our Terms of Service; our Cookies policy describes our use of cookies in detail.

Last updated: March 11, 2026

SCOPE AND APPLICATION

We operate a platform that connects equipment owners with renters. This policy applies to all users of our platform, including renters, equipment owners, and guests (users who book without creating an account). This Privacy Policy applies to personal information collected through our website (udigit.ca), our mobile applications for iOS and Android, social media platforms, email communications, push notifications, and any other online services we operate. It also applies to personal information collected during the provision of our rental services. This Policy does not apply to information collected by third parties that may be linked from our site or to data processed solely by your device (e.g. locally cached content) that we do not receive.

INFORMATION WE COLLECT

We may collect various types of personal and non-personal information, including:

• Contact Information – such as your name, mailing address, email address, phone number (including mobile number for SMS when you opt in) and preferred method of contact.
• Rental Details – including the rental dates, delivery and pickup locations, payment method, and related notes.
• Payment Information – which may include credit card numbers and billing addresses. We do not store full card numbers; payment data is processed by Stripe, and Stripe's privacy policy applies to payment data they collect and process. Payment data is not stored in full on our servers.
• Documents You Provide – documents you upload (e.g. Certificate of Insurance, driver's licence) for a booking are stored and used to verify eligibility and fulfill the rental; they may be shared with the equipment owner for that booking.
• Identity Verification – When you complete identity verification (e.g. via third-party services), we may process identity documents and, where you consent, biometric or facial data for verification purposes. Such data is processed in accordance with the verification provider's privacy policy and applicable law.
• Contract and Signature Data – when you sign a rental agreement or other contract through our platform, we store the contract and signature data (including electronic signatures) and may share them with the equipment owner and use them for the rental, support, and dispute resolution.
• Guest Users – if you book as a guest (without an account), we collect the same categories of information needed for the booking (contact details, payment method, delivery address, etc.) and treat it in accordance with this policy.
• Equipment Owners – if you list equipment as an owner, we collect business information (e.g. business name, type, address, tax ID, payout account details via our payment provider) for onboarding, payouts, and compliance.
• Usage Data – information about how you interact with our website, including IP addresses, browser type, pages visited, and referral URLs. We collect this data to improve our site and user experience.
• Correspondence – records of communication between you and us, including emails, phone calls and messages, as well as any feedback or testimonials you choose to provide.
• SMS and Text Messaging Data – when you opt in to SMS, we collect and store your mobile phone number, the date and time of your opt-in (consent timestamp), your opt-in source (e.g. booking flow, profile settings), and message delivery status for audit and support. See our SMS Terms for full details.
• Device and Location Data – if you enable location services or share your GPS location when booking equipment, we may collect location data to ensure accurate delivery and service.
• Push Notifications – when you use our mobile app and enable push notifications, we collect and store device tokens (identifiers used to deliver push messages to your device), your platform (iOS or Android), and your notification preferences. We use Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs) to deliver notifications. These providers process tokens in accordance with their privacy policies.
• Mobile App and Offline Data – when you use our mobile app, we may cache certain content (e.g. equipment listings, booking details, delivery addresses) on your device to support offline or limited-connectivity use. This cached data is stored locally on your device; we do not receive or process it unless you take actions that sync with our servers (e.g. when you go back online). We do not collect data about what you view while offline.

We will only collect the minimum amount of personal information necessary to fulfill the purposes outlined in this Policy.

HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

• Providing Services – to process reservations, deliver and pick up equipment, and communicate with you about your rental, including sending booking confirmations, reminders, delivery and pickup updates, and other transactional messages by email, SMS (when you have opted in), and push notifications (when you have enabled them in our mobile app).
• Fulfilling Rentals – to facilitate the rental between you and the equipment owner, including sharing relevant information with the owner for your booking.
• Promotions – to run promotions (e.g. contests, spin-to-win), including to verify eligibility, communicate with participants, and fulfill prizes; promotion-specific terms may also apply.
• Customer Service and Support – to respond to inquiries, provide guidance, and address any issues you encounter.
• Processing Payments – to complete transactions securely and to manage billing, invoicing, and refunds.
• Marketing and Promotions – to send you information about our services, special offers or news that may interest you. You can opt out of marketing communications at any time. We send marketing SMS only if you have separately opted in to marketing text messages.
• Analytics and Improvements – to monitor usage patterns and improve our website, services and customer experience.
• Legal and Regulatory Compliance – to comply with applicable laws, regulations and requirements from government authorities.
• Security – to detect and prevent fraud, unauthorized activities or access to our systems.
• Automated Processing – We do not use automated decision-making or profiling that significantly affects you without human review, except where necessary for fraud prevention or as required by law.

We will always ensure that we have a legitimate reason to collect and use your personal data.

CONSENT

By providing us with your personal information, you consent to our collection, use, and disclosure of it as described in this Privacy Policy. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent or ask questions about your consent, please contact us using the information below.

DISCLOSURE OF INFORMATION

We will not share your personal information with third parties except in the following circumstances:

• Sharing with Equipment Owners – When you book equipment, we share with the equipment owner for that booking the information necessary to complete and manage the rental (e.g. name, contact details, delivery address, and any documents you provide, such as insurance or licence). Owners use this information only for that purpose and in accordance with applicable privacy law. This is also described in our Terms of Service.
• Service Providers – We may share information with trusted third-party vendors who assist us in operating our business, including Stripe (payments), SendGrid (email), Twilio (SMS delivery), Supabase (hosting and data storage), and Firebase (push notification delivery via Firebase Cloud Messaging). Apple and Google also process push notification tokens when you use our mobile app. These providers have their own privacy policies; we are not responsible for their practices. We require them to use your information only for the purposes we specify and in accordance with applicable law.
• Legal Requirements – We may disclose information if required to comply with a court order, law or legal process, including responding to government or regulatory requests.
• Business Transfers – In the event of a merger, acquisition, or sale of all or a portion of our business, your information may be transferred to the acquiring organization as part of the transaction.
• Protection of Rights – We may disclose information when we believe it is necessary to protect the rights, property, or safety of U-Dig It Rentals, our customers, or others.

We do not sell or rent your personal information to third parties for marketing purposes.

COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to collect data about your browsing behavior. Cookies are small text files placed on your device to help operate the site and improve your experience. We use cookies to:

• Remember your preferences and settings.
• Understand how visitors use our website.
• Enable certain functionalities, such as secure login and reservation forms.

You can control or disable cookies through your browser settings, although doing so may affect the functionality of our website. By continuing to use our site, you consent to our use of cookies as described in this Policy. For more detail on the cookies and similar technologies we use, see our Cookies policy.

MOBILE APP AND PUSH NOTIFICATIONS

Our mobile applications (iOS and Android) provide the same core services as our website, with additional features such as push notifications and offline access. When you install and use our app:

• Push notifications – We send booking updates, reminders, and other transactional messages via push when you enable them. You control which notifications you receive through our Notification settings or your device settings. We use Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs); your device token is shared with these services to deliver messages. We do not use push notifications for marketing unless you have separately opted in.
• Offline and cached content – We cache equipment listings, booking details, and delivery information on your device so you can view them when connectivity is limited (e.g. at a job site). This data remains on your device; we do not track what you view offline. Cached data may be cleared when you clear app data or uninstall the app.
• App store distribution – Our apps are distributed through the Apple App Store and Google Play. Your download and use may be subject to their terms and privacy policies. We do not control how app stores collect or use your data.

For questions about push notifications or mobile app data, contact us using the details in the Contact Us section below.

DATA SECURITY

DATA BREACH NOTIFICATION

If we experience a breach of your personal information that poses a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada (or the applicable provincial privacy authority) as required by PIPEDA and applicable provincial law. We will notify you without unreasonable delay and will provide information about the nature of the breach, the personal information involved, and steps you can take to protect yourself.

DATA RETENTION

We will retain your personal information only as long as necessary to fulfill the purposes for which it was collected and as required by law. For example, we may retain booking and contract data for at least seven (7) years for tax, legal, and dispute-resolution purposes. Account data may be retained until you request deletion, subject to legal hold requirements. We may retain documents and contract data as needed for the rental, dispute resolution, and legal or regulatory requirements. When your personal information is no longer needed, we will securely destroy or anonymize it. We may retain anonymized data for analytics.

Identity verification and biometric data (where collected) are retained only as long as necessary for verification purposes and as required by law or our agreements with the verification provider, after which they are securely deleted or anonymized. SMS consent records and opt-in timestamps are retained as required for legal compliance (e.g. CASL, TCPA) and to demonstrate consent if requested by regulators or our messaging provider. Push notification device tokens are retained until you disable push, uninstall the app, or we receive notice that the token is no longer valid (e.g. from the push provider).

YOUR RIGHTS AND CHOICES

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access – You can request access to the personal information we hold about you.
• Correction – You can request that we correct or update any inaccurate or incomplete information.
• Data Portability – You may request a copy of your personal information in a structured, commonly used, machine-readable format where technically feasible.
• Withdrawal of Consent – You may withdraw your consent to our use of your personal information (subject to legal and contractual obligations).
• Deletion – You can request that we delete your personal information, provided it is no longer required for legal or legitimate business purposes.
• Marketing Opt-Out – You can opt out of receiving promotional emails by following the unsubscribe instructions in the email or contacting us directly.
• SMS Opt-Out – You can opt out of SMS at any time by replying STOP to any message, updating your Notification settings, or contacting us. Withdrawing SMS consent does not affect the lawfulness of processing before withdrawal.
• Push Notification Opt-Out – You can disable push notifications at any time through your device settings (e.g. Settings → Notifications → U-Dig It Rentals) or through our Notification settings. Disabling push does not affect other channels (email, SMS, in-app). You may also uninstall the mobile app; we will stop sending push notifications to unregistered devices.

To exercise these rights, please contact us using the details provided below.

Exercise of these rights may be subject to legal or contractual exceptions. We will respond to valid requests within the timeframes required by applicable law (e.g. under PIPEDA). If you are not satisfied with our response, you may have the right to complain to the Office of the Privacy Commissioner of Canada or your provincial privacy authority, where applicable.

INTERNATIONAL DATA TRANSFERS

Your information may be processed in Canada and in other countries where our service providers operate. We take steps to ensure that such transfers are subject to appropriate safeguards (e.g. contractual or adequacy) as required by applicable law.

COMPLIANCE

We collect, use, and disclose personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial legislation where applicable.

Quebec residents: If you are in Quebec, your personal information is also subject to Quebec's Act respecting the protection of personal information in the private sector. You may have additional rights, including the right to be informed of the use of automated decision-making and to request correction or deletion of your information.

THIRD-PARTY LINKS

Our website may contain links to third-party sites. We do not control and are not responsible for the privacy practices of these sites. We encourage you to read the privacy policies of any third-party sites you visit.

CHILDREN'S PRIVACY

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly. Parents or guardians who believe we might have data about a child should contact us immediately.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. When we make changes, we will update the "Last updated" date and post the revised policy on our website. For material changes, we will provide notice at least 30 days before the effective date (e.g. by email or platform notification). We encourage you to review this Policy periodically. Continued use of our services after a change signifies your acceptance of the revised Policy.

CONTACT US

If you have questions or concerns about this Privacy Policy, or if you wish to exercise your rights regarding your personal information, please contact us at: