Privacy Policy

01

About this policy

In this policy, "Gopher," "we," "us," and "our" mean 18070369 Canada Inc., operating as Gopher It Deliveries. "Personal information" means information about an identifiable individual.

This policy applies to personal information we handle about prospective and current customers, delivery recipients, website visitors, and business contacts. It covers information received through this website, email, telephone calls or texts, the ShipTrack customer portal, and the delivery services we provide.

Third-party websites, portals, and services have their own privacy practices. This policy describes Gopher's handling of information and does not replace the policies of those third parties.

02

Information we collect

The information we collect depends on how you interact with us and what is required to respond to or complete a delivery.

• Contact and identity information: names, business names, telephone numbers, email addresses, and the role of a business contact.
• Delivery information: pickup and drop-off addresses, recipient information, parcel or item details, quantities, preferred timing, delivery instructions, and other information needed to assess or complete the delivery.
• Delivery records: pickup and delivery dates and times, delivery status, charges, and selected pickup or drop-off email notifications.
• Proof of delivery: the recipient's name and, when requested or appropriate, an optional signature or photograph.
• Billing information: billing contacts, invoice details, payment status, and transaction records. Credit-card payments are processed through FreshBooks. This website does not collect or store complete payment-card or banking details.
• Communications: emails, form submissions, telephone or text correspondence, quote requests, feedback, and customer-support information.
• Technical and security information: IP address, browser and device information, request date and time, referring page, security events, and ordinary server logs.

03

How we collect information

We may receive personal information:

• directly from you when you contact us, request a quote, book a delivery, communicate with our team, or use the ShipTrack customer portal;
• from a business customer, sender, or other person arranging a delivery for a recipient;
• from an assigned driver when a delivery is picked up or completed;
• from our service providers when they support email, billing, dispatch, hosting, security, or delivery operations; and
• automatically through necessary website, server, and security technologies.

If you provide another person's information, such as a delivery recipient's name, phone number, or address, you are responsible for having authority to provide that information and for sharing this policy with them where appropriate.

04

How we use information

Gopher uses personal information only for reasonable business purposes connected to our courier services and operations, including to:

• respond to inquiries and prepare quotes;
• assess delivery requirements, routes, and pricing;
• schedule, dispatch, manage, and complete deliveries;
• communicate with customers, senders, recipients, and assigned drivers;
• send optional pickup and drop-off email notifications when selected;
• document delivery completion and provide optional proof of delivery;
• create invoices, process payments through FreshBooks, and maintain accounting records;
• provide customer service, resolve concerns, and manage disputes;
• protect the website, systems, customers, personnel, and deliveries from misuse, fraud, or security threats;
• meet insurance, legal, regulatory, tax, and record-keeping obligations; and
• support a purpose explained to you when the information is collected or another purpose you authorize.

We do not use contact-form information for newsletters, promotional texts, or unrelated marketing. We do not use personal information for automated decisions that produce legal or similarly significant effects.

05

Consent and choices

We obtain consent in a form appropriate to the nature of the information and the circumstances. Consent may be express, such as when you submit a quote request, or implied when the purpose is obvious and you voluntarily provide information needed for a delivery.

You may withdraw consent for an optional use by contacting our Privacy Officer. Withdrawal will not affect uses already permitted by law and may limit our ability to respond to a request or provide a service. Pickup and drop-off email notifications are optional and are sent only when selected.

Where the law permits or requires it, we may collect, use, or disclose information without consent, including to comply with legal obligations, investigate fraud, respond to an emergency, or protect safety and legal rights.

06

When we share information

We do not sell, rent, trade, or provide personal information to third parties for their own marketing. We limit disclosure to what is reasonably required for the purpose.

Personal information may be available to authorized dispatch personnel and assigned drivers who need it to manage or complete a delivery. We also use the following service providers:

ShipTrack by Descartes

Customer order entry, dispatch, driver workflow, selected notifications, delivery records, and optional proof of delivery.

FreshBooks

Invoicing, accounting records, and payment processing. The Gopher website does not store payment-card details.

Resend

Transmission of contact-form submissions and branded confirmation emails.

Google Workspace

Business email, including receipt and storage of inquiries and related correspondence.

Cloudflare

DNS, proxy and content-delivery services, website security, and Turnstile verification for the contact form.

Hetzner and RunCloud

Website hosting infrastructure and server management.

We may also disclose information when required by law, court order, lawful authority, insurance requirements, or where reasonably necessary to protect safety, investigate wrongdoing, enforce an agreement, or establish or defend a legal claim. If our business is reorganized, financed, sold, or transferred, information may be disclosed under appropriate confidentiality protections as part of that transaction.

07

Processing outside Canada

Some service providers process or store information outside Canada. Our main website server is located in Ashburn, Virginia, United States. Cloudflare operates a global network, Resend is based in the United States, and ShipTrack may use infrastructure in Canada and the United States. Other providers may process information in the United States or additional jurisdictions where they operate.

When information is processed outside Canada, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, or other authorities under those laws. Gopher remains responsible for personal information under its control and uses service providers for defined business purposes.

You may contact our Privacy Officer for more information about service providers or cross-border processing.

08

Cookies and website security

Gopher does not use Google Analytics, advertising pixels, behavioural advertising, session-recording tools, or marketing cookies on this website.

Cloudflare and Turnstile may use strictly necessary cookies, local storage, device signals, or similar technologies to deliver the website, distinguish legitimate visitors from automated abuse, prevent fraud, and protect the contact form. Our web server also creates ordinary technical and security logs.

You can use your browser controls to block or delete cookies. Blocking necessary technologies may affect the reliability of the website or prevent the contact form from working correctly.

09

How long we keep information

We retain personal information only for as long as reasonably necessary for the identified purpose, legal requirements, dispute resolution, security, and legitimate business records. Our retention schedule is:

Quote requests and general inquiries

Up to two years after the last communication.

Delivery records and optional proof of delivery

Up to two years after delivery completion, unless a longer period is required for accounting, a dispute, or a legal obligation.

Accounting and tax records

At least six years from the end of the applicable financial or tax year, or longer when required by law.

Ordinary website and security logs

Up to 90 days, unless needed to investigate or respond to a security incident.

Disputes and legal claims

Until the matter is resolved and any applicable limitation or retention period has expired.

We apply this schedule to records under our control. Information held in ShipTrack or another provider's system may also be subject to that provider's contractual terms, backup cycles, and legal requirements. When information is no longer required, we take reasonable steps to delete, destroy, or anonymize it. Residual copies may remain in protected backups until they are overwritten through normal cycles.

10

How we safeguard information

We use administrative, technical, and organizational safeguards appropriate to the nature of the information. These include:

• HTTPS encryption for website traffic;
• Cloudflare security and contact-form abuse protection;
• role-based access limited to authorized personnel and assigned drivers;
• strong passwords and multi-factor authentication for principal business systems;
• service providers selected to perform defined operational functions; and
• retention limits and procedures for responding to privacy or security incidents.

Drivers receive only the information reasonably needed to complete assigned deliveries. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a breach of security safeguards occurs, we will assess it and notify affected individuals and privacy regulators where required by applicable law.

11

Your privacy rights

Subject to applicable law and permitted exceptions, you may:

• ask whether we hold personal information about you;
• request access to that information and an account of how it has been used or disclosed;
• ask us to correct information that is inaccurate or incomplete;
• request deletion of information that is no longer required;
• withdraw consent for an optional use; and
• ask questions or challenge our compliance with this policy.

Send requests to sales@gopheritdeliveries.ca. Please describe your request clearly. We may need to verify your identity before releasing or changing information. We will respond within the timeframe required by applicable law and explain if we cannot fulfil all or part of a request because of a legal, contractual, or record-keeping requirement.

We encourage you to contact us first so we can address your concern. You may also contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over the matter.

12

Children's privacy

This website and our booking services are intended for adults and authorized business representatives. We do not knowingly collect personal information directly from children. A delivery recipient may occasionally be under 18, but children are not the intended customer relationship and we limit recipient information to what is reasonably necessary for the delivery.

13

Changes to this policy

We may update this policy when our services, providers, practices, or legal obligations change. The current version will be posted on this page with a revised effective date. If a change is material, we may provide additional notice where appropriate.