Privacy Policy

1. Introduction

BrakeCheck ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our automotive service management platform located at https://codeflippers.com and any related services (collectively, the "Services").

We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's privacy legislation, and other applicable Canadian privacy laws. By using our Services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register for our Services or book an appointment:

• Identity Information: Name, email address, phone number
• Address Information: Street address, city, province, postal code
• Account Information: Username, password (encrypted), account preferences
• Vehicle Information: Vehicle make, model, year, VIN (Vehicle Identification Number), license plate number, mileage, and specifications
• Service History: Appointment records, service details, work orders, and inspection results

2.2 Automatically Collected Information

When you access our Services, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, interactions with our Services
• Location Data: General geographic location based on IP address (not precise GPS location)
• Session Data: Session tokens, authentication status

2.3 Payment Information

We do not directly process or store credit card information. Any payment processing is handled by third-party payment processors who maintain their own privacy policies and security standards compliant with PCI-DSS requirements.

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To schedule, manage, and complete automotive services and appointments
• Account Management: To create and maintain your customer account
• Communication: To send appointment confirmations, reminders, service updates, and respond to your inquiries
• Vehicle Tracking: To maintain service history records for your vehicles
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Business Operations: To improve our Services, analyze usage patterns, and ensure platform security
• Loyalty Programs: To track and manage customer loyalty tier benefits

4. Legal Basis for Collection

Under PIPEDA, we collect and use your personal information only with your consent and for purposes that a reasonable person would consider appropriate in the circumstances. Our legal bases include:

• Consent: Your explicit consent when registering or booking services
• Contract Performance: Necessary to provide the automotive services you request
• Legal Obligation: Compliance with regulatory requirements and vehicle safety standards
• Legitimate Business Interest: Improving services and maintaining platform security

5. Information Sharing and Disclosure

We may disclose your personal information to:

• Service Providers: Third parties who assist in operating our platform (e.g., cloud hosting providers, email services) under contractual obligations to protect your data
• Vehicle Data Sources: NHTSA vPIC API for VIN decoding to obtain accurate vehicle specifications
• Business Partners: Automotive parts suppliers or inspection agencies when necessary to complete your service
• Legal Authorities: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to affected customers)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission; encryption of sensitive stored data
• Access Controls: Role-based access restrictions; authentication requirements for staff
• Secure Storage: Database security measures and secure server infrastructure
• Security Headers: Implementation of X-Frame-Options, Content-Security-Policy, and other protective headers
• Regular Reviews: Periodic security assessments and vulnerability monitoring

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active and for a reasonable period thereafter for record-keeping
• Service Records: Vehicle service history retained for 7 years to support warranty claims and legal compliance
• Work Orders: Retained for 7 years in accordance with Ontario automotive service regulations
• Session Data: Automatically deleted after session expiration (default: 2 hours)

Upon account deletion, we will anonymize or delete your personal information except where retention is required by law.

8. Your Rights and Choices

Under Canadian privacy law, you have the following rights:

8.1 Access and Information

You may request access to your personal information and details about how it has been used. We will respond within 30 days.

8.2 Correction

You may request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings.

8.3 Withdrawal of Consent

You may withdraw consent for certain uses of your personal information at any time, subject to legal or contractual restrictions. Withdrawal may limit your ability to use certain Services.

8.4 Account Deletion

You may request deletion of your account. Note that service records may be retained for legal compliance purposes.

8.5 Complaints

If you believe our handling of your personal information violates privacy laws, you may file a complaint with us. If unresolved, you may contact the Office of the Privacy Commissioner of Canada.

9. Cookies and Tracking

We use cookies and similar technologies to operate our Services:

• Session Cookies: Essential for authentication and maintaining your logged-in state
• Security Cookies: CSRF protection tokens to prevent cross-site request forgery attacks
• Functional Cookies: Remember preferences and improve user experience

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use our Services.

10. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately for removal.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be notified through our Services or by email. The "Last Updated" date indicates the most recent revision.

13. Contact Information

For privacy-related inquiries, requests, or complaints, please contact:

We will acknowledge receipt of your inquiry within 5 business days and respond substantively within 30 days, as required under PIPEDA.

14. Regulatory Authority

For matters not resolved through our internal process, you may contact: