Legal

Marcadot Space Privacy Policy

Effective date: July 16, 2026
Last updated: July 16, 2026
Version: 1.0

This Privacy Policy explains how 1001413013 ONTARIO INC., operating as Marcadot Space (“Marcadot”, “we”, “us” or “our”) collects, uses, discloses, retains and protects personal information.

This Policy applies to personal information handled through:

the Marcadot Space website and advertiser portal;
advertising inquiries, sales, onboarding, billing and customer support;
Marcadot’s in-rideshare advertising network and participating tablets;
campaign QR codes and campaign reporting;
driver applications and participation; and
other business interactions with Marcadot.

This Policy does not govern an advertiser’s own website, application, checkout process or other destination reached after a person follows an advertiser link or scans a campaign QR code. Those services are controlled by the advertiser or other third party and are subject to their own privacy practices.

1. Privacy principles

Marcadot is responsible for personal information under its control. We aim to collect only the information reasonably needed for identified business purposes, use and disclose it only for those purposes or as otherwise permitted by law, protect it using safeguards appropriate to its sensitivity, and retain it only as long as necessary.

Marcadot does not sell or rent personal information.

2. Personal information we may collect

The information we collect depends on how a person interacts with Marcadot.

2.1 Website visitors and people who contact us

We may collect:

name, business name, job title and professional role;
business email address, telephone number and mailing address;
the content of inquiries, requests, feedback and other communications;
appointment, demonstration or sales-meeting information;
marketing preferences and unsubscribe records; and
technical information described in Section 2.6.

2.2 Prospective and current advertisers

We may collect:

business contact and account information;
company, billing and tax information;
Campaign Orders, accepted contract versions and acceptance records;
campaign package, timing, pricing, payment status and invoice records;
advertisements, logos, creative assets and brand guidelines;
QR-code destinations and related campaign configuration;
campaign communications, approvals, support requests and service records;
reports, measurement disputes, renewal and cancellation records; and
information needed to assess restricted or regulated advertising categories.

We do not ask advertisers to send payment-card numbers, bank credentials, authentication codes or passwords by email or through ordinary support messages. Where a third-party payment service is offered, that provider may collect payment information under its own privacy policy.

2.3 Business-development contacts

For business-to-business outreach, we may collect professional information from the individual, their organization, public professional sources, business directories or service providers. This may include:

name, title, employer and professional responsibilities;
business email address, business telephone number and public professional profile;
the source and date of the information;
role relevance, consent basis and no-solicitation restrictions; and
outreach, response and unsubscribe history.

We use this information only for legitimate business-development purposes and subject to applicable electronic-marketing requirements.

2.4 Participating drivers and vehicle operators

We may collect information reasonably required to assess eligibility, administer participation, support safe installation and operation, measure campaign delivery and make payments, including:

name and contact information;
vehicle ownership, lease or finance status and vehicle details;
driving, PTC or similar licensing information;
insurance and eligibility information;
driver agreement and consent records;
installation, mounting, maintenance and support records;
participation status, driver activity and ride-volume information;
tablet assignment and operational records;
payment, invoice and tax-related records; and
communications, complaints and incident information.

We limit the collection of eligibility documents and financial information to what is reasonably needed for participation, payment, safety, compliance and recordkeeping.

2.5 In-vehicle tablets, campaign delivery and operational location

Marcadot tablets may generate operational information such as:

tablet or application identifiers;
application status, connectivity and diagnostic information;
campaign, creative and playback records;
timestamps, duration and device runtime;
ride-associated measurement signals used by Marcadot’s approved verification process;
operational location information while a participating driver is active; and
maintenance, error and security logs.

We use this information to operate the network, schedule and verify campaign delivery, maintain devices, investigate service issues, protect the network and prepare campaign reporting.

Tablet cameras and microphones must remain disabled and are not used by Marcadot for advertising delivery, passenger monitoring or campaign measurement.

Marcadot does not require passengers to create an account or identify themselves to view in-vehicle advertisements. We do not use passenger identity to decide which advertisement an individual passenger sees. Campaign delivery is based on campaign commitments, fleet activity and operational factors.

2.6 QR codes, website activity, cookies and technical data

When a person visits our website or portal, interacts with an online form, or scans a Marcadot campaign QR code, we or our service providers may collect technical information such as:

IP address;
browser, operating system and device type;
date, time and referring page;
pages, forms or functions used;
campaign, creative or QR-code identifier;
scan or click event information;
approximate location derived from technical or network signals, where available;
cookie, session or similar identifiers; and
security, error and diagnostic information.

We may use cookies and similar technologies for security, session management, user preferences, form functionality, measurement and analytics. Browser settings can be used to block or delete cookies, but some website or portal functions may not work properly as a result.

A QR scan may be recorded as a campaign event before the person is directed to an advertiser-selected destination. Total QR activity may include repeat scans. Unless Marcadot expressly documents a deduplication method, QR activity should not be interpreted as unique passenger reach.

Once a person reaches an advertiser-controlled destination, the advertiser’s privacy policy and data practices apply to information collected there.

3. How we collect personal information

We may collect personal information:

directly from the individual;
from the individual’s employer or authorized representative;
through forms, contracts, Campaign Orders, portal activity and communications;
through Marcadot tablets, campaign systems, QR infrastructure and operational tools;
from public professional or business sources;
from service providers supporting verification, communications, hosting, analytics, billing, security or operations; and
where permitted by law, from government, regulatory, insurance or other authoritative sources used to verify eligibility or compliance.

4. How we use personal information

We may use personal information to:

respond to inquiries and provide requested information;
qualify prospective advertisers and manage business relationships;
prepare, accept and administer Campaign Orders and other agreements;
create, review, approve, schedule and deliver advertising campaigns;
generate and validate campaign QR codes and destination links;
measure campaign activity and prepare advertiser reports;
invoice, collect payment, administer renewals and maintain financial records;
recruit, assess, onboard, support and pay participating drivers;
install, assign, monitor, maintain and secure Marcadot tablets;
use operational location data for fleet operations, service verification, safety, maintenance and campaign measurement;
provide support, respond to complaints and resolve service issues;
prevent fraud, misuse, security incidents and unauthorized access;
maintain records of consent, contract acceptance, unsubscribe requests and legal notices;
comply with legal, regulatory, tax, accounting, insurance and safety obligations;
establish, exercise or defend legal claims;
improve our services, systems, measurement methods and customer experience using information appropriate for that purpose; and
send commercial electronic messages where we have a valid consent or other lawful basis and provide a working unsubscribe method.

We will seek additional consent where required before using personal information for a materially different purpose.

6. When we disclose personal information

We may disclose personal information in the following circumstances.

6.1 Service providers

We may use service providers for functions such as:

website and application hosting;
database, authentication and file storage;
email and business communications;
analytics and campaign measurement;
QR-code operation and redirection;
billing, accounting and payment processing;
document processing and technical support;
device connectivity, messaging and maintenance;
security, backup and incident response; and
legal, accounting, insurance and other professional services.

Service providers are authorized to handle personal information only for the services they provide to Marcadot, subject to appropriate contractual or other safeguards.

6.2 Advertisers and campaign reporting

We may provide advertisers with campaign information such as playbacks, modelled exposures, playback time, QR activity and campaign status.

Marcadot does not provide advertisers with passenger names or contact details through ordinary campaign reporting. Campaign metrics may be observed, modelled or estimated and are not intended to identify an individual passenger.

6.3 Participating drivers and operational parties

We may share the minimum information reasonably needed to coordinate tablet installation, maintenance, campaign operations, support, safety and service recovery with participating drivers, installers, contractors or other authorized operational parties.

6.4 Legal and safety disclosures

We may disclose information where we reasonably believe the disclosure is permitted or required to:

comply with law, a court order, warrant, subpoena or lawful government request;
respond to an emergency involving a risk of serious harm;
investigate fraud, security incidents, unlawful activity or a breach of an agreement;
protect the rights, safety and property of Marcadot, an individual or the public; or
establish, exercise or defend legal claims.

6.5 Business transactions

Personal information may be disclosed as part of a proposed or completed financing, merger, acquisition, reorganization, sale of assets or similar business transaction, subject to confidentiality, permitted-purpose and legal requirements.

6.6 With consent

We may disclose personal information for another purpose with the individual’s consent or as otherwise permitted by law.

7. Processing outside Canada

Marcadot or its service providers may store or process personal information in Canada, the United States or other jurisdictions where they operate.

Personal information processed outside Canada may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies or other authorities in accordance with those laws. Marcadot remains responsible for personal information transferred to a service provider for processing and uses contractual or other measures appropriate to the circumstances.

Questions about service-provider locations may be sent to the Privacy Officer using the contact information below.

8. Retention and disposal

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing services, administering contracts, completing campaign reporting, making or receiving payments, resolving disputes, maintaining security and complying with legal, tax, accounting and regulatory requirements.

Retention periods vary according to the type and sensitivity of information, the relationship involved, whether the information was used to make a decision about an individual, and applicable legal requirements.

When personal information is no longer required, we take reasonable steps to securely delete, destroy or anonymize it. Information may remain for a limited period in backups or archival systems until those records are securely overwritten or deleted.

We retain records of security-safeguard breaches for at least the period required by applicable law.

9. Safeguards

Marcadot uses administrative, technical and physical safeguards appropriate to the sensitivity, amount, format and use of the personal information under its control. These measures may include:

role-based or need-to-know access controls;
account and authentication protections;
secure transmission and storage controls where appropriate;
device configuration and permission controls;
logging, monitoring, backup and incident-response procedures;
contractual confidentiality and data-protection requirements;
staff and contractor privacy responsibilities; and
secure deletion or destruction procedures.

No method of electronic transmission or storage is completely secure. Marcadot cannot guarantee absolute security, but we take reasonable steps to reduce foreseeable risks.

10. Privacy and security incidents

If a breach of security safeguards involving personal information occurs, Marcadot will assess the circumstances and take reasonable steps to contain, investigate and reduce the risk of harm.

Where required by applicable law, Marcadot will report the breach to the Office of the Privacy Commissioner of Canada, notify affected individuals and keep required breach records.

11. Accuracy

We take reasonable steps to keep personal information as accurate, complete and current as necessary for the purposes for which it is used.

Individuals and business contacts are responsible for providing accurate information and notifying Marcadot when material information changes. Requests to correct personal information may be sent to the Privacy Officer.

12. Access and correction requests

Subject to applicable legal exceptions, an individual may make a written request to:

learn whether Marcadot holds personal information about them;
obtain access to that information;
receive information about how it has been used and disclosed; and
request correction of inaccurate or incomplete information.

Requests must provide enough information for Marcadot to identify the relevant records and verify the requester’s identity. We will use identity-verification information only for the request and related legal recordkeeping.

Marcadot will respond within the period required by applicable law, generally within 30 days, unless a lawful extension applies. Access may be limited or refused where permitted or required by law. If a request is refused, we will provide the reason and available complaint options, subject to legal restrictions.

13. Children

Marcadot’s services are directed to businesses, business contacts and participating adult drivers. We do not knowingly seek personal information from children through the website, advertiser portal or in-vehicle advertising service.

A campaign QR code may lead to an advertiser’s destination. The advertiser is responsible for ensuring that its destination and collection practices are appropriate for its intended audience.

14. Third-party websites and services

Our website, communications, QR codes or portal may link to third-party websites and services. Marcadot does not control those third parties and is not responsible for their privacy, security or content practices.

Individuals should review the privacy policy of a third party before providing personal information to it.

15. Changes to this Privacy Policy

We may update this Policy to reflect changes in our services, technology, legal obligations or information-handling practices.

The current version will identify its effective date and version number. Where a change is material, we will provide notice appropriate to the circumstances and seek additional consent where required.

16. Questions, requests and complaints

Marcadot’s Privacy Officer is responsible for overseeing compliance with this Policy.

Privacy Officer
Marcadot Space
1001413013 ONTARIO INC.
250 Consumers Rd, Suite 611
North York, ON M2J 4V6
Canada

Privacy and legal email: legal@marcadot.ca
General inquiries: inquire@marcadot.ca
Billing inquiries: sales@marcadot.ca

Please write “Privacy Request” in the email subject line and describe the request or concern in sufficient detail.

We will investigate privacy complaints and respond within a reasonable period. If a concern is not resolved, an individual may contact the Office of the Privacy Commissioner of Canada.