Skip to content

Home Privacy policy

Privacy policy

How Xpidex collects, uses and protects personal information, in line with Québec's Law 25 and Canadian privacy legislation.

Last updated: 2026-09-13

1. What we collect

  • Identity and contact details: name, company, email address, phone number.
  • Shipment data: pickup and delivery addresses, package dimensions and weight, dates, notes you add.
  • Account data: password (stored only as a salted hash), saved addresses, language and notification preferences.
  • Billing data: invoices and, for saved cards, only the brand, last four digits and expiry. Full card numbers never reach our servers — they are handled by our payment provider.
  • Technical data: IP address, browser type and pages visited, used to keep the service secure and working.

2. Why we use it

  • To quote, arrange, deliver and invoice your shipments.
  • To send service messages: booking confirmations, delivery notifications, password resets.
  • To provide customer support and handle claims.
  • To meet accounting, tax and legal obligations.

3. Consent

We collect personal information with your consent, which you give by creating a booking or an account. You may withdraw consent at any time, though we may then be unable to provide the service.

4. Who we share it with

We share the minimum necessary with service providers that make the service work: our payment processor, our email provider, our hosting and database providers, and the driver assigned to your shipment. We do not sell personal information and we do not use it for third-party advertising.

Some providers store data outside Québec, including in the United States and Europe. We select providers that offer a comparable level of protection.

5. How long we keep it

Booking and invoicing records are kept for the period required by tax law. Account data is kept while your account is open; when you close it, personal fields are erased and only the anonymised commercial record remains.

6. Your rights

  • Access the personal information we hold about you.
  • Correct anything inaccurate.
  • Withdraw consent or ask for deletion, subject to our legal retention duties.
  • Ask for your data in a structured, commonly used technical format (portability).
  • File a complaint with the Commission d'accès à l'information du Québec.

7. Cookies

We use strictly necessary cookies only: a signed session cookie when you sign in, and local browser storage that keeps your half-finished quote so you do not lose it on refresh. We do not use advertising or cross-site tracking cookies.

8. Security

Traffic is encrypted in transit, passwords are hashed with PBKDF2-SHA256, sessions are signed, and access to production data is limited to staff who need it.

9. Privacy officer

For any question or request regarding your personal information, contact our privacy officer at the address on our contact page. We answer within 30 days.

This document is provided for information and does not constitute legal advice.

TrackGet a Quote