Effective Date: 2024-07-01
Last Updated: 2025-08-01

1. Introduction

Transport JM Express (“we,” “our,” or “us”) is committed to protecting the confidentiality of personal information collected through our transport management web application. This policy describes our practices regarding the collection, use, storage, and protection of data in accordance with Quebec’s Law 25 and applicable data protection laws.

2. Person Responsible for the Protection of Personal Information

Transport JM Express
8008 15th Avenue
Montreal, Quebec
H1Z 3N6
Privacy inquiries email: info@transportjmexpress.com

3. Types of Data Collected

3.1 User Account Data

Identification information: first name, last name, email address (used as login identifier)
Contact information: phone number
Business information: company name, company affiliation
User type: client, employee, or administrator
Preferences: preferred language, time zone

3.2 Operational Data

Transport orders: delivery dates, project numbers, pickup and delivery addresses
Freight information: descriptions, quantities, dimensions, weight
Documents: uploaded files (PDFs, images) related to orders
Storage data: inventory, check-in/check-out dates, locations

3.3 Geolocation Data

Geocoded addresses: GPS coordinates of pickup and delivery locations via Google Maps API
Routing data: planned and optimized routes

3.4 Technical Data

Access logs: IP addresses, browser type, operating system
Session data: authentication data, temporary preferences
Change history: modifications to orders and routes (audit trail)

4. Legal Basis and Purposes of Data Collection

4.1 We collect your data for the following purposes:

Contract performance: to provide transport management services
Legal obligations: to comply with transportation-related regulatory requirements
Legitimate interests: to improve our services and ensure security
Consent: for certain marketing communications (where applicable)

4.2 Specific Uses

Create and manage user accounts
Process and track transport orders
Optimize delivery routes
Generate reports and invoices
Communicate with clients and employees
Ensure application security

5. Data Hosting and International Transfers

5.1 Data Location

Your data is hosted on servers located in the United States. By using our application, you consent to the transfer of your data to the United States.

5.2 Safeguards

We have implemented appropriate contractual clauses and security measures to protect your data during international transfers, in compliance with Law 25 requirements.

6. Data Sharing

6.1 We share your data only with:

Authorized employees: personnel requiring access to perform their duties
Service providers:
- Web hosting services (U.S.-based servers)
- Geolocation services (Google Maps)
- Email delivery services
Legal authorities: when required by law or court order
Business transactions: in the event of a merger, acquisition, or asset sale

6.2 We never sell your personal data

7. Data Retention

7.1 Retention Periods

Account data: retained while the account is active + 3 years
Orders and documents: 7 years (tax and legal obligations)
Technical logs: 1 year
Geolocation data: 2 years
Change history: retained for the lifetime of the primary record

7.2 Deletion

Data is securely deleted or anonymized after the applicable retention periods.

8. Security Measures

8.1 Technical Safeguards

HTTPS encryption for all communications
Password hashing using secure algorithms
Token-based API authentication
Regular encrypted backups
Firewalls and intrusion monitoring

8.2 Organizational Safeguards

Role-based access control (Admin, Client, Employee)
Employee training on data protection
Strong password policy
Regular access reviews

9. Cookies and Similar Technologies

9.1 Essential Cookies

Session cookies: maintain user login
CSRF tokens: protect against attacks
Preferences: language and time zone

9.2 Cookie Management

You may configure your browser to refuse cookies; however, some application features may not function properly without them.

10. Your Rights

10.1 Under Quebec Law 25

You have the right to:

Access: obtain a copy of your data
Rectification: correct inaccurate data
Erasure: request deletion (subject to legal obligations)
Portability: receive your data in a structured format
Objection: object to certain processing activities
Withdrawal of consent: at any time for consent-based processing

10.2 Exercising Your Rights

Contact our Privacy Officer. We will respond within 30 days of receiving your request.

11. Security Incidents

In the event of a data breach presenting a risk to your rights, we will notify you within 72 hours and inform the appropriate authorities in accordance with applicable laws.

12. Minors’ Data

Our application is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

13. Third-Party Services

13.1 Google Maps API

We use Google Maps for geolocation services. Use of these services is subject to Google’s Terms of Service and Privacy Policy.

13.2 External Links

Our application may contain links to third-party websites. We are not responsible for their privacy practices.

14. Policy Updates

We reserve the right to modify this policy. Changes will be communicated by email to registered users and displayed in the application 30 days before they take effect.

15. Dispute Resolution and Complaints

15.1 Internal Process

Please first contact our Privacy Officer regarding any concerns.

15.2 Supervisory Authority

Commission d’accès à l’information du Québec
Québec Office: 525 René-Lévesque Blvd East, Suite 2.36, Québec (Québec) G1R 5S9
Montreal Office: 2045 Stanley Street, Suite 900, Montreal (Québec) H3A 2V4
Phone: 1-888-528-7741
Website: www.cai.gouv.qc.ca

16. Accessibility

This policy is available in French and English within the application. To obtain this policy in an accessible format or for assistance, please contact us.

17. Contact Us

For any questions regarding this policy or your personal data, please contact: