1. Who We Are

ANY CAR. (“ANY CAR”, “we”, “our”, “us”) is a Canadian-owned company. Our head office is located at 10-191 Bowes Rd, Concord, Ontario, L4K 1H9, Canada.

2. Scope of this Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect your Personal Information when you:

• fill out a service-request form at anycar.ca or any sub-domain (the “Site”);
• communicate with us by email, phone, SMS, or social media; or
• otherwise interact with us in connection with our services.

It complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), relevant provincial privacy legislation, and Canada’s Anti-Spam Legislation (CASL).

3. What “Personal Information” Means

“Personal Information” is information about an identifiable individual. For the purposes of our service-request form, this typically includes:

We do not intentionally collect sensitive data (e.g., credit-card numbers, driver’s-license scans) through the form.

4. Why We Collect Your Information

We collect and use Personal Information strictly for the purposes listed below and for compatible purposes you would reasonably expect:

1. Service Fulfilment – to confirm appointments, diagnose service needs, and provide quotes or invoices.
2. Customer Support – to respond to inquiries or complaints.
3. Operational Administration – internal record-keeping, auditing, business analytics.
4. Regulatory Compliance – to satisfy legal or insurance requirements.
5. Marketing (Optional, Consent-Based) – to send you promotions or maintenance reminders only if you expressly opt in (see § 8).

We do not sell or rent your Personal Information.

5. Legal Bases for Processing

Under PIPEDA we rely on one or more of the following grounds:

• Your Consent – given by ticking the checkbox or otherwise volunteering your details.
• Contractual Necessity – to prepare or perform a service agreement with you.
• Legitimate Interests – e.g., fraud prevention or IT security, balanced against your privacy rights.
• Legal Obligation – when laws require us to retain or disclose certain records.

6. How We Share Information

We may share Personal Information only with:

• Service Providers (e.g., web-hosting, appointment-scheduling, CRM, email/SMS gateways) bound by confidentiality agreements and required to use the data solely for our instructions.
• Professional Advisors (e.g., accountants, insurers, lawyers) under confidentiality duty.
• Authorities when compelled by law, court order, or to protect our rights or the safety of others.

If AnyCar is involved in a merger, acquisition, or asset sale, Personal Information may be transferred subject to the same or stronger protections.

7. International & Cross-Border Transfers

Our primary servers are in Canada. Some service providers (e.g., cloud backup) may process data in the United States or other jurisdictions whose privacy laws differ. We contractually require equivalent safeguards and you may request further details (see § 14).

8. Email & SMS Marketing (CASL Compliance)

• We use express consent opt-ins — you will not receive promotional messages unless you check a separate box or otherwise affirmatively subscribe.
• Each marketing message includes an unsubscribe link or reply-STOP instruction.
• Operational messages (appointment confirmations, invoices, recalls) are deemed transactional and are still sent even if you opt out of marketing.

9. Cookies & Tracking Technologies

The Site uses cookies and similar technologies to:

• remember session preferences;
• compile anonymous usage statistics (Google Analytics, etc.);
• protect against fraud (reCAPTCHA, firewall filtering).

You can disable non-essential cookies in your browser; essential cookies (for basic site functions) will remain.

10. Retention & Disposal

We keep Personal Information only as long as necessary for the purposes stated above or as required by law (e.g., tax, warranty, or safety records—typically 7 years). Data slated for disposal is securely erased or anonymised.

11. Security Measures

We employ administrative, technical, and physical safeguards, including:

TLS/SSL encryption in transit;
Role-based access controls and two-factor authentication for staff;
Regular vulnerability scans and off-site encrypted backups;
Incident-response procedures consistent with the Office of the Privacy Commissioner of Canada guidelines.

Despite these measures, no transmission or storage can be 100 % secure. In the unlikely event of a breach involving real risk of significant harm, we will notify you and regulators as required by law.

12. Your Rights & Choices

Subject to limited exceptions, you have the right to:

1. Access – obtain a copy of Personal Information we hold about you.
2. Correct – request corrections to inaccurate or incomplete data.
3. Withdraw Consent – opt out of marketing or ask us to stop processing (where feasible).
4. Erase – request deletion when information is no longer needed, barring legal retention duties.
5. Portability – receive data in machine-readable format (when technically feasible).

To exercise these rights, contact us (see § 14). We may need to verify your identity.

13. Children’s Privacy

Our Site is not intended for, and we do not knowingly collect information from, individuals under under 16 years of age. without parental consent. If you believe a child has provided us with Personal Information, please contact us immediately.

14. Contact & Complaints

Questions, requests, or complaints about privacy can be directed to:

Privacy Officer
ANY CAR
10-191 Bowes Rd, Concord, Ontario, L4K 1H9
Email: privacy@anycar.ca
Phone: +1 416-555-0123

If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, in Québec, the Commission d’accès à l’information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when revisions were made. Material changes will be highlighted on the Site or communicated by email before taking effect.

16. Acknowledgment

By submitting your service request and checking the consent box, you:

1. confirm that the information you provide is true and correct;
2. consent to the collection, use, and disclosure of your Personal Information as described; and
3. authorize ANYCAR to contact you regarding your request.