Privacy Policy
Last updated: October 20, 2026
This policy explains what personal information QuickQuick collects, why, and what control you have over it. It covers the website (quick-quick.ca) and the QuickQuick mobile app, both operated by QuickQuick Inc. ("QuickQuick", "we"). We follow Canada's federal privacy law (PIPEDA) and Quebec's Law 25.
1. What we collect
- Account details — email address, name, phone number, password (stored only as a secure hash), preferred language and time zone.
- Seller verification documents — government ID and permits/licenses submitted during seller onboarding, reviewed before a store goes public.
- Activity on the platform — orders, bookings and appointments, gift cards, reviews you write, disputes you open, and stores you favourite.
- Messages — conversations between buyers and sellers held on the platform.
- Payment references — order amounts, payment status and transaction identifiers. For sellers: the Stripe account ID used to receive payments, and the Interac e-Transfer email if provided.
- QuickRide vehicles and drivers — for a seller offering seats in their car: the make, model, colour, licence plate and vehicle identification number (VIN), photos of the car, and the registration and insurance documents a member of our team reviews. The documents are private: they are never shown to buyers. Licence plates are automatically detected and pixelated on any vehicle photo shown publicly; the unblurred original is kept privately for that review and is deleted the moment the photo is removed, the car is removed, or the account is closed. A seller who adds a named driver also gives us that person's name, phone number, email and photograph — if you name someone else as a driver, you are responsible for having their permission. A driver's phone number and the plate are shown to a passenger only once their seat is confirmed.
- Device information — a push-notification token if you enable notifications in the mobile app, and standard technical logs (such as IP address) generated by hosting our service.
- A shop's location — only if a seller taps "use my current location" in their store settings. It is optional, it can be cleared at any time, and nothing asks for it automatically.
2. What we never collect
Card numbers. Card payments are completed on the payment provider's own hosted page (Stripe Checkout). Your card details go directly to that provider and never pass through or get stored on QuickQuick's servers. Interac e-Transfers are sent by you, from your bank, directly to the seller.
Your location. We never ask a buyer's device where it is. Distances on the Explore page are measured from the city you are browsing, not from you.
3. Why we collect it
- To run the marketplace: create your account, process orders and bookings, deliver messages, and show sellers what they need to fulfil your order.
- To send notifications you've asked for (order status, booking reminders, messages).
- To verify sellers and keep the platform safe: fraud prevention, dispute handling, enforcing our terms.
- To meet legal obligations, such as keeping transaction records for tax purposes.
We do not use your information for third-party advertising, and we do not sell it. Ever.
4. Who we share it with
- The seller you transact with — sees your name, the order or booking details, and your messages to them. If you pay by Interac e-Transfer, you and the seller see each other's transfer email.
- The store's driver or team member who serves you — sees your name and phone number for the departure or booking they are on, through their own sign-in: exactly what they already see at the door, and not your email, how you paid, or any of the store's other bookings.
- A shop's saved location is shared with no one. It is never shown on a map, never returned by our API, and never sent to a browser. It is used on our servers for one purpose: working out how far a shop is from the city a buyer is browsing, and even that is published only rounded to the nearest half kilometre — deliberately too coarse to point at a door. Many of our sellers work from home, and their address is their home address.
- Authorities — only if the law requires it.
5. Who processes your data
These companies handle data on our behalf, under our instructions and their own privacy policies. None of them may use it for anything else.
| Processor | What for | What they see |
|---|---|---|
| Stripe | Card payments and seller payouts | Amount, your email, the seller's account; your card details go to Stripe directly and never to us |
| Twilio | Text messages, and email delivery | Your phone number or email and the message |
| SendGrid (Twilio) | Email delivery | Your email and the message |
| Azure Communication Services | Email delivery | Your email and the message |
| Microsoft Azure | Hosting, the database and uploaded files; Application Insights (technical logs); Azure AI Vision (finding the licence plate in a car photo so it can be blurred) | Everything the platform stores; car photos for plate detection; logs with masked addresses and numbers |
| Azure AI Translator (Microsoft) | Translating a chat or support message into English or French, only when someone reading it taps Translate | The text of that one message; Microsoft translates it and does not keep it |
| Address suggestions (Places), distance and time estimates for rides (Routes), push notifications on Android (Firebase) | The address text you type, route origin and destination, your device's push token | |
| Google, Microsoft and Apple (sign-in) | Signing up or signing in with your Google, Microsoft or Apple account, only if you choose to (Apple in the app) | They send us your name, your email (Apple may give us a relay address instead of your real one) and an account id, which we keep to recognise you next time; we post nothing to that account and read nothing else from it |
| Apple | Push notifications on iPhone | Your device's push token |
| Expo | Relays push notifications to Google and Apple | Your device's push token and the notification text |
| NHTSA vPIC (United States government) | Decoding a vehicle identification number when a seller registers a car | The VIN only — nothing about the person |
6. Where your data goes
Our servers and database are on Microsoft Azure in Canada. Some processors above operate in the United States: Stripe, Twilio and SendGrid, Google, Microsoft's sign-in service, Apple, Expo and the NHTSA vPIC service. Data sent to them is subject to the laws of that country, including access by its authorities. We send each of them only what the table says.
7. How long we keep it
| Data | Kept |
|---|---|
| Account details, favourites, saved searches, push tokens | While your account is open; erased when you close it |
| Orders, bookings, ride seats and receipts | 6 years after the transaction, for tax and accounting law — with your name, phone, note and delivery address removed when you close your account |
| Messages | While the thread exists; your side is blanked when you close your account, the other party keeps theirs. A translation of a message is kept with it, so it is not sent again, and goes when the message's text does |
| Audit log (who did what, with masked labels after closure) | 12 months |
| Car registration and insurance documents | While the car is listed; deleted when the car or the account is removed |
| Unblurred originals of car photos | Deleted with the photo |
| Seller verification documents | While the store is active |
| Technical logs and the sent-message queue | 30 days |
8. If there is a breach
If personal information is lost, stolen or accessed without authorisation and there is a real risk of significant harm to you, we will notify you as soon as feasible and report it to the Office of the Privacy Commissioner of Canada — and, for Quebec residents, to the Commission d'accès à l'information. We keep a record of every breach, whether or not it reaches that threshold.
9. Your rights and controls
- Access and portability — download a copy of everything we hold about you anytime from Account → Personal data: profile, addresses, orders, bookings and ride seats, reviews you wrote and rider ratings you received, messages you wrote, notifications, referrals, favourites, and — for a seller — vehicles and drivers.
- Correction — update your name, email, phone and preferences in account settings.
- Deletion — close your account from Account → Personal data. This removes your personal information, subject to the retention above. Closure waits until any upcoming booking, or a departure you are driving with passengers, is completed or cancelled.
- Notifications — push notifications are off until you enable them and can be turned off in your device settings. Texts are sent only if you agreed to them at sign-up or in settings; reply STOP to any text, or use the settings toggle, to withdraw. The deals digest email is opt-in and has a one-click unsubscribe link.
10. Cookies and third-party resources
We set essential cookies only: keeping you signed in, protecting forms against forgery, remembering your language, keeping a guest's cart and order, and — for 30 days after you follow a friend's referral link — remembering who referred you. There are no advertising or cross-site tracking cookies, which is why there is no cookie banner. Fonts load from Google Fonts and some scripts from the jsDelivr CDN; those services see your IP address when your browser fetches them.
11. Age
QuickQuick is intended for adults. You must be at least 18 to create an account.
12. Changes
If we change how we handle personal information, we'll update this page and its date, and announce material changes on the platform.
13. Privacy officer
The person accountable for personal information at QuickQuick is Ezekiel Ogunnika, privacy@quick-quick.ca. Write there to exercise any of the rights above or to ask a question this policy doesn't answer. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.