Privacy
Policy

1. Overview

U-Dig It Rentals ("we", "us", "our") operates the U-Dig It Rentals equipment rental marketplace platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, mobile applications, and related services (collectively, the "Platform").

We are committed to compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in New Brunswick.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, phone number, mailing address when you create an account.
• Identity verification: government-issued photo ID and selfie for renter and owner verification.
• Payment information: credit/debit card details processed securely by Stripe (we do not store full card numbers).
• Booking details: rental dates, equipment preferences, delivery addresses, and communications with equipment owners.
• Owner listing information: equipment descriptions, photos, pricing, availability, and business details.
• Communications: messages sent through our contact form, support requests, and in-platform messaging. We may review, monitor, or retain in-platform messages for safety, fraud prevention, dispute assistance, support, and compliance purposes.
• SMS opt-in: your mobile number and messaging preferences when you opt in to text messages (see the SMS terms in our Terms of Service).

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, pages visited, time spent on pages, and referring URLs.
• Cookies and similar technologies: session cookies, authentication tokens, and analytics cookies. See our Cookie Policy for details.
• Location data: approximate location from IP address for service area matching. We do not track your device's precise GPS location without consent.
• Equipment telematics: equipment may carry GPS/telematics devices that report the equipment's location, usage, and machine data during a rental. This can reveal the location of your work site while you have the equipment. By booking equipment, you consent to this collection as described in our Terms of Service (Equipment tracking). Telematics data is used for theft prevention and recovery, verifying rental terms, billing, safety, and dispute resolution.

3. How We Use Your Information

We use personal information for the following purposes:

• Operating and improving the Platform and its features.
• Processing bookings, payments, and refunds.
• Verifying identity for safety and trust.
• Communicating booking confirmations, updates, and support responses.
• Sending service-related notifications (booking reminders, policy changes).
• Preventing fraud, abuse, and unauthorized access.
• Complying with legal obligations and enforcing our terms.
• Administering security holds, deposits, and damage claims between users.
• Powering AI-assisted features (e.g. earnings estimates and drafting aids); inputs to these features may be processed by our AI service providers to generate the output shown to you.
• Generating aggregated, anonymized analytics to improve our services.

4. Sharing Your Information

We share personal information only in the following circumstances:

• Between renters and owners: contact name, phone number, and booking details necessary to fulfill a rental.
• Service providers: payment processing and identity verification (Stripe), email delivery (SendGrid), SMS delivery (Twilio), push notifications (Firebase Cloud Messaging, Apple Push Notification service), database and infrastructure (Supabase), hosting (Vercel), analytics, AI processing, and error monitoring (Sentry) — each bound by data processing agreements or equivalent contractual protections.
• Legal requirements: when required by law, court order, or governmental request, or to protect rights, safety, or property.
• Business transfers: in connection with a merger, acquisition, or sale of assets (you will be notified of any change in ownership).

We do not sell your personal information to third parties.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: retained while your account is active and for 3 years after account closure.
• Booking records: retained for 7 years for tax and legal compliance.
• Identity verification documents: retained for the duration of account activity plus 1 year, then securely deleted.
• Analytics data: aggregated and anonymized data may be retained indefinitely.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) and at rest.
• Secure authentication with session management.
• Access controls limiting employee access to personal data.
• Regular security assessments and monitoring.
• PCI DSS-compliant payment processing through Stripe.

No method of transmission or storage is 100% secure. If you become aware of a security incident, contact us immediately.

7. Your Rights Under PIPEDA

Under Canadian privacy law, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Withdrawal of consent: withdraw consent for data processing (this may limit your ability to use the Platform).
• Deletion: request deletion of your personal information, subject to legal retention requirements.
• Complaint: file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, contact our Privacy Officer using the details in Section 10 below. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. For full details on the types of cookies we use and how to manage them, see our Cookie Policy.

9. Children's Privacy

The Platform is not intended for individuals under 18 years of age, and our Terms of Service require users to be at least 21. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

10. Contact Us

For privacy inquiries, data access requests, or complaints, contact our Privacy Officer:

• Email: support@udigit.ca
• Phone: +1 (506) 700-0724
• Mail: 945 Golden Grove Road • Saint John, NB E2H 2X1 • Canada

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance. We encourage you to review this page periodically.

See also: Terms of Service | Cookie Policy | Disclaimer