Loop Rideshare — Privacy Policy
Effective date: September 29, 2025
Last revised: September 29, 2025
1. Overview and scope
Loopride Inc. (operating as “Loop Rideshare”, “Loop”, “we”, “us”, “our”) provides rideshare, package and community services via website, mobile applications and related services (the “Services”). This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, how we protect it, and the legal terms that govern our relationship with users of the Services in Canada.
This Policy applies to all personal information collected or processed by Loop in connection with the Services and to all users, drivers, contractors and third parties who interact with the Services.
2. Controller and contact
Controller: Loopride Inc., 2000 Argentia Road, Plaza 3, Suite 400, Mississauga, ON L5N 1V9.
Privacy contact: info@looprideshare.com.
Use this contact for access, correction, deletion, complaints, legal process or data-subject requests.
3. Definitions
- Personal Information: Any information about an identifiable individual.
- Sensitive Personal Information: Driver’s license images or government IDs when voluntarily supplied for verification.
- Processing: Collection, use, disclosure, storage, transfer, retention, access, correction, deletion and other operations on Personal Information.
4. Information we collect
We collect only the Personal Information necessary to provide the Services, to secure them and to meet legal obligations. Types include:
- Identity: full name, display name, username.
- Contact: email address, telephone number, mailing address (when provided).
- Verification: driver’s license and other ID documents (only if user elects verification).
- Payment: payment card or banking data provided at checkout. We do not store payment card numbers on our systems. Payment data is transmitted directly and securely to Authorize.NET.
- Location: device geolocation when required to provide a Service (ride tracking, package verification, community creation/search).
- Usage and ride records: ride history, timestamps, pickup/dropoff points, driver IDs, receipts, ratings, messages, logs and metadata.
- Device and technical data: device identifiers, IP address, log files, browser and OS information, crash reports and analytics.
We do not collect biometric data unless explicitly authorized and lawfully permitted. We do not knowingly collect information from children under 18.
5. Lawful basis and purposes for processing
We process Personal Information on one or more lawful bases:
- Contractual necessity. To provide the Services, fulfill bookings, process payments and perform our contract with you.
- Consent. Where required we obtain clear consent (e.g., driver verification). Consent may be withdrawn, subject to legal/contractual limits.
- Legal obligations. To comply with laws, court orders, regulatory requests or to establish, exercise or defend legal claims.
- Legitimate interests. To prevent fraud, protect safety, improve Services, secure systems and pursue business operations consistent with user expectations, unless overridden by user privacy rights.
Purposes include account creation and management, ride matching, payments, dispute handling, fraud prevention, safety and security, regulatory compliance, analytics, marketing (where consented) and customer support.
6. Third parties, processors and transfers
We disclose Personal Information only to service providers and partners that have a legitimate need and contractual obligations to process data on our behalf. Current categories:
- Payment processor: Authorize.NET. Payment data is transmitted to Authorize.NET and not stored on our servers.
- Service providers: hosting, analytics, email, SMS, verification vendors, legal and collection services.
- Legal and safety: law enforcement, courts, regulators when required.
Cross-border transfers may occur. When we transfer Personal Information outside Canada we impose contractual, technical and organizational safeguards, including Standard Contractual Clauses or equivalent protections, to ensure an adequate level of protection. Where foreign law imposes access obligations on a recipient, we will seek to limit disclosure and challenge improper requests.
7. Retention and deletion
We retain Personal Information only as long as necessary to fulfill the purposes set out in this Policy and to meet legal, tax and regulatory obligations. Specifically:
- Ride history and driver verification records: retained for the period required by applicable Canadian law and regulation.
- Payment data: card data is not stored by Loop; Authorize.NET retention governed by its policies.
- Other account data: retained while account is active and for a reasonable period after account termination to respond to disputes, enforce agreements, detect fraud and satisfy legal obligations.
When retention ends we securely delete, anonymize or destroy Personal Information. We maintain and document retention schedules and deletion procedures.
8. User rights and procedures
Subject to applicable law and reasonable verification, users have the right to:
- Access the Personal Information we hold about them.
- Request correction of inaccurate or incomplete information.
- Request deletion, subject to legal and business retention obligations.
- Withdraw consent where processing is based on consent.
- Object to or restrict processing where permitted by law.
- Opt out of marketing at any time via the unsubscribe link or account settings.
Requests may be made in-app or by emailing info@looprideshare.com. We will verify identity, respond promptly and provide reasons for any refusal. We log all data requests and maintain an audit trail.
9. Security measures
We deploy industry standard technical, administrative and physical safeguards to protect Personal Information:
- TLS/SSL for in transit encryption.
- Application and database encryption for sensitive fields.
- Role-based and least-privilege access controls.
- Multi-factor authentication for privileged accounts.
- Regular security testing, vulnerability management and third-party audits.
- Logging, monitoring and anomaly detection.
- Policies for secure disposal and key management.
No system is perfectly secure. We maintain an incident response plan and will promptly notify affected individuals and the Office of the Privacy Commissioner of Canada when required by law.
10. Data breaches and notification
We will investigate all suspected breaches. When a breach poses a real risk of significant harm we will:
- Notify affected individuals with required content and remediation steps.
- Notify the Office of the Privacy Commissioner of Canada in accordance with PIPEDA and applicable provincial rules.
- Preserve evidence and cooperate with regulators and law enforcement.
11. Account misuse, prohibited conduct and enforcement
Users must not use the Services to violate law, infringe rights, commit fraud or evade platform rules. Examples of prohibited conduct:
- Providing false identity or forged documents.
- Circumventing verification or payment processes.
- Abusing dispute or deletion processes to avoid lawful obligations.
- Creating multiple accounts to evade sanctions or bans.
We reserve the right, at our sole discretion and without liability, to suspend or terminate accounts, withhold funds, refuse service, delete content and cooperate with legal authorities if misuse is detected. We will preserve and disclose records as needed for legal action. Users who violate this Policy indemnify Loop for damages and costs that arise from misuse.
12. Children
Our Services are intended for individuals 18 years or older.
- Users under 18 are not permitted to create accounts.
- If under 18, you may only use the Services when accompanied by a parent or guardian.
- If we become aware that we have collected Personal Information of a minor in violation of this Policy, we will promptly delete it.
13. Cookies and tracking
We use cookies and similar technologies for essential operation, security, analytics and marketing. Users may control cookie preferences through browser settings and account preferences. Blocking cookies may degrade Service functionality.
14. Audits, reviews and accountability
Loop maintains internal privacy governance with a designated privacy officer. We perform periodic privacy impact assessments, vendor due diligence, security audits and maintain records of processing activities.
15. Changes to this Policy
We may revise this Policy. Material changes will be posted on our website and notified by email where required. Continued use after notice constitutes acceptance of the updated Policy. We keep versions and change logs for legal defensibility.
16. Legal compliance, subpoenas and emergency disclosure
We will comply with lawful demands for information. Where feasible we will notify users of legal process unless prohibited. We may disclose information to protect safety, prevent fraud, or in emergencies where disclosure is necessary to prevent imminent harm.
17. Limitation of liability, indemnity and remedies
To the maximum extent permitted by law:
- Loop’s liability for privacy-related claims is limited to direct damages up to the greater of $5,000 CAD or the total fees paid by the user to Loop in the 12 months preceding the claim.
- Users agree to indemnify Loop for claims, losses and costs arising from user misconduct, false statements, misuse of the Services or violation of this Policy.
These limits do not exclude remedies that cannot be waived under applicable law.
18. Governing law and dispute resolution
This Policy and any disputes arising out of it are governed by the laws of the Province of Ontario and the laws of Canada applicable therein. Parties submit to the exclusive jurisdiction of Ontario courts. We may pursue injunctive or equitable relief without waiving other remedies.
19. Integration with Terms and exceptions
This Privacy Policy is incorporated into and subject to the Loop Terms of Service. In the event of inconsistency the more privacy-protective term will control unless otherwise required by law.
20. Contact, complaints and supervisory authority
For privacy requests, complaints or to escalate unresolved issues contact: info@looprideshare.com.
If unsatisfied you may file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.