How fareSPY meets Canada's Personal Information Protection and Electronic Documents Act
Zerano Inc. operates fareSPY in full compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law. PIPEDA governs how private-sector organisations collect, use and disclose personal information in the course of commercial activities.
PIPEDA is built on 10 fair information principles. Here is how fareSPY addresses each one.
Zerano Inc. has designated a Privacy Officer responsible for PIPEDA compliance. Contact: privacy@zerano.one. All third-party service providers are bound by data processing agreements.
We identify why we collect personal information before or at the time of collection. Purposes are documented in our Privacy Policy. We do not use personal information for undisclosed purposes.
We obtain meaningful consent — express or implied depending on the sensitivity of the information. Express consent is obtained for fare alerts, marketing communications, and any sensitive processing. You may withdraw consent at any time without penalty, subject only to legal or contractual restrictions.
We collect only the personal information necessary to deliver fareSPY services. We do not collect government ID, passport numbers, biometric data, or precise location. Search queries are session-based and not linked to identifiable profiles without your consent.
Personal information is used only for the purposes for which it was collected. Account data is retained while active and deleted within 30 days of account closure. CASL opt-in records are retained for 3 years as required by law.
You may update your account information at any time through your account settings. You may request correction of inaccurate information by contacting privacy@zerano.one.
We protect personal information using TLS encryption in transit, hashed credential storage, access controls, and contractual protections with all service providers. Our infrastructure is hosted on ISO 27001-certified Hetzner servers in the EU.
Our privacy practices are publicly documented in this notice and our Privacy Policy. We respond to privacy inquiries within 30 days. Our Privacy Officer is accessible at privacy@zerano.one.
You have the right to access personal information we hold about you. Submit a written access request to privacy@zerano.one. We will respond within 30 days, providing the information or explaining why access cannot be granted.
You may challenge our PIPEDA compliance by contacting our Privacy Officer. Unresolved concerns may be escalated to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.
Office of the Privacy Commissioner of Canada: priv.gc.ca
