This policy explains how iDriver handles personal information in the iDriverX driver portal. It applies to drivers who create a profile, to visitors who only browse the job board, and to anyone who contacts us through the platform. Effective 10 October 2012.
Information you give us
You can browse and search the job board without an account. We collect the following only once you start a profile or apply to a job.
- Identity and contact. Your name, email addresses, phone numbers and home address.
- Personal details. Date of birth, place of birth, gender, pronouns, marital status and number of children, where you choose to provide them.
- Licence information. Licence number, issuing province, class, issue date and expiry date. When you scan the barcode on the back of your licence, these fields are read from the barcode on your device.
- Driving record. Information extracted from a driver abstract or CVOR record you upload, which can include licence condition, demerit points, medical due date, earliest licence date, sex, height, carrier name and roadside inspection history.
- Work history and qualifications. Previous employers, dates, reasons for leaving, notice period, years of experience, certifications, equipment you are qualified on, languages and whether you are bondable or incorporated.
- Documents you upload. Licence images, abstracts, CVOR records, certificates and any other file you attach to your profile.
- Signatures. When an agreement requires one, we record the name you typed, the agreement version and the time you accepted it.
Information we collect automatically
- Session cookie. A single cookie named `idx_driver_session` keeps you signed in for thirty days. See the cookie policy for detail.
- Location. If you use the search by my location feature, your device shares its coordinates so nearby jobs can be ranked first. Coordinates and an accuracy reading are stored against your driver record.
- Application activity. The jobs you apply to and the stage each application has reached.
Communications
If you email, text or phone us through the platform, we keep a record so the team can follow up and so there is a history on your file.
- Email subject lines, message bodies and attachments.
- Text message content and the numbers involved.
- Call metadata such as time, duration and outcome. Calls may be recorded, and where a recording or voicemail exists we store a link to it.
Why we hold it
- To build your driver profile and send it with the applications you choose to submit.
- To confirm you meet the stated requirements of a job before you apply.
- To contact you about your applications, your documents and your account.
- To meet record keeping obligations that apply to commercial driver hiring.
- To keep the platform secure and to investigate misuse.
We do not sell your personal information, and we do not use it for advertising.
Who we share it with
Employers. When you apply to a job, your profile and the documents attached to it are shared with the carrier or agency that posted it. You choose when that happens by submitting the application. Nothing is sent to an employer before you apply.
We also use the following service providers, who process information on our behalf and are not permitted to use it for their own purposes.
- Neon. Hosts the database that holds your profile.
- Amazon Web Services. Stores the documents you upload.
- Vercel. Hosts and serves the application.
- Resend. Sends and receives email on our behalf.
- TextBee. Sends and receives text messages.
- Aircall. Handles phone calls, including recordings and voicemail where they exist.
- Ably. Delivers live updates inside the application.
- Mapbox and CARTO. Serve the map tiles on the job map. Your browser contacts them directly when you open the map, which means they receive your IP address.
- Google Fonts. Serves the typefaces used across the site. Your browser contacts Google directly to fetch them, which means Google receives your IP address.
Some of these providers operate outside Canada, so your information may be stored or processed in another country and be subject to the laws of that country.
How long we keep it
- Account and profile. Two years after your account is closed.
- Uploaded documents. Two years after your account is closed.
- Communications. Kept for two years.
- Location readings. Kept for two years.
How we protect it
- Passwords are never stored. We keep only a salted PBKDF2 hash, which cannot be reversed to recover the password.
- Your session cookie is encrypted and signed, so its contents cannot be read or altered by anyone holding the cookie.
- Traffic between your device and the platform is encrypted in transit.
- Uploaded documents are held in private storage and served only through short lived links to people authorized to see them.
Your rights
Under Canadian federal privacy law and the law of Ontario, you can ask us to do the following, and we will respond within the timeframe the law sets.
- Give you a copy of the personal information we hold about you.
- Correct anything that is wrong or out of date.
- Delete your account and the information attached to it, subject to any record we are legally required to keep.
- Withdraw a consent you previously gave, including consent to receive text messages.
- Explain how a particular piece of information was used or who it was disclosed to.
Write to privacy@idriverx.com to make any of these requests. If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada.
Changes
If we change this policy we will update the effective date at the top. Where a change is significant we will tell you directly rather than rely on you noticing.
Contact
iDriver, 600c Magnetic Drive, North York, Ontario M3J 3J2. Email privacy@idriverx.com or call 416 514 0444.