Porterchain Privacy Policy

This Privacy Policy applies to personal information collected through:

• The Porterchain website
• Merchant and driver accounts
• Delivery operations and support communications

This policy applies to all individuals whose personal information is processed by Porterchain in Canada.

• Personal Information: Information about an identifiable individual, as defined by PIPEDA.
• Merchant: A business using Porterchain’s delivery infrastructure.
• Driver: An individual authorized to perform deliveries through the Porterchain platform.

We may collect the following categories of personal information:

3.1 Merchant Information

• Name, business name
• Email address, phone number
• Pickup and return addresses
• Billing and payment details (processed by third-party providers)

3.2 Delivery & Recipient Information

• Recipient name
• Delivery address
• Proof of delivery (timestamps, photos, signatures where enabled)

3.3 Driver Information

• Name and contact details
• Driver license and compliance documents
• Vehicle details

3.4 Technical Information

• IP address
• Device and browser information
• Log and usage data

Porterchain does not intentionally collect sensitive health information unless explicitly required and disclosed.

Personal information is collected to:

• Provide and operate delivery services
• Calculate pricing and route deliveries
• Communicate with merchants, drivers, and recipients
• Process payments and invoices
• Maintain security, compliance, and auditability
• Improve system reliability and performance

By creating an account, submitting parcels, or using our services, you consent to the collection, use, and disclosure of personal information as described in this policy.

Consent may be withdrawn, subject to legal and operational requirements.

We use personal information only for the purposes identified. Information may be disclosed to:

• Drivers, limited to assigned deliveries
• Payment processors (e.g., Stripe)
• Cloud hosting and analytics providers
• Legal or regulatory authorities when required by law

We do not sell personal information.

We implement reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit and at rest
• Role-based access controls
• Logging of administrative actions
• Regular security reviews and backups

Individuals have the right to:

• Request access to their personal information
• Request correction of inaccurate or incomplete information

Requests may be submitted to our Privacy Officer using the contact details below.

Personal information is retained only as long as necessary for the purposes described or as required by law. Typical retention periods include:

• Delivery and billing records: up to 6 years
• Account information: active period plus a reasonable retention window

Porterchain uses third-party service providers for payments, hosting, analytics, and communications. These providers are contractually required to protect personal information.

Personal information may be processed or stored outside Canada. In such cases, information is subject to the laws of the jurisdiction where it is processed, and appropriate safeguards are applied.

In the event of a breach involving personal information that poses a real risk of significant harm, Porterchain will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

Porterchain services are not directed to children under the age of 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy periodically. Material changes will be posted on our website with an updated effective date.

Privacy Officer
Porterchain
Email: privacy@porterchain.com

Individuals may contact us with questions, requests, or complaints regarding privacy practices.