Privacy Policy

1. Introduction

On Arrive Inc. (“we”, “our”, or “the Company”) is a Canadian incorporated company based in Montreal, Quebec, Canada. We are the developer of CAAD App, a real-time geolocation-based mobile platform designed to help local businesses connect with their communities.

This Privacy Policy describes how On Arrive Inc. collects, uses, stores, and protects personal information obtained through our corporate website at caadapp.ca (the “Site”).

We are committed to protecting your privacy and handling your personal information responsibly in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy legislation, and applicable provincial laws including Quebec's Law 25 (Act to Modernize Legislative Provisions Respecting the Protection of Personal Information).

2. Information We Collect

We collect minimal personal information necessary to operate this Site and respond to inquiries.

2.1 Information You Provide Directly

When you use our contact form, we collect:

• Full name — to address you personally in our response.
• Email address — to reply to your inquiry.
• Message content — the content of your inquiry or message.

2.2 Automatically Collected Information

When you access the Site, standard technical data is automatically logged by Cloudflare, Inc. (our hosting and infrastructure provider) as part of normal server operations. This may include:

• IP address
• Browser user agent (browser type and version)
• Requested URL and HTTP method
• Date and time of the request

This data is logged passively by Cloudflare as part of our hosting infrastructure. On Arrive Inc. does not operate any third-party analytics, tracking scripts, or profiling tools on this Site. We do not actively review or use server log data for commercial purposes.

3. How We Use Your Information

We use the personal information we collect solely for the following purposes:

• To respond to your inquiries or messages submitted through our contact form.
• To improve the performance, content, and usability of this Site.
• To analyze aggregate usage patterns and understand how visitors interact with our Site.
• To comply with our legal obligations under applicable Canadian law.

We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes.

4. Data Protection & Security

On Arrive Inc. takes the security of your personal information seriously. We implement appropriate technical and organizational measures to protect your data, including:

• Secure HTTPS encryption for all data transmitted through this Site.
• Restricted access to personal data on a need-to-know basis.
• Hosting on Cloudflare's infrastructure, which provides enterprise-grade security, DDoS protection, and encrypted data transmission.
• Regular review of data handling practices.

While we take all reasonable precautions, no method of data transmission over the internet is completely secure. We cannot guarantee absolute security of information transmitted to or from this Site.

5. Your Rights

Under PIPEDA and applicable Canadian privacy law, you have the following rights regarding your personal information:

To exercise any of these rights, please contact us at info@caadapp.ca. We will respond to your request within 30 days, as required by PIPEDA.

6. Cookies & Tracking Technologies

This Site may use cookies and similar tracking technologies to enhance your browsing experience and gather analytical information. Pursuant to Quebec's Law 25, no non-essential cookies are placed before you provide your consent.

Types of Cookies We May Use

How to Control Cookies

Most web browsers allow you to control cookies through their settings. You can typically:

• View cookies stored on your device.
• Delete existing cookies.
• Block all or certain types of cookies in future.

Please note that disabling cookies may affect the functionality of this Site. Refer to your browser's help documentation for instructions.

7. Contact & Privacy Questions

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal information, please contact us:

If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

8. Updates to This Policy

On Arrive Inc. reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Where appropriate, provide more prominent notice of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of this Site following the posting of changes constitutes your acceptance of those changes.

This policy was last updated on February 17, 2026.

9. Quebec's Law 25 — Specific Obligations

On Arrive Inc. is committed to full compliance with Quebec's Law 25 (Act to Modernize Legislative Provisions Respecting the Protection of Personal Information). The following sections describe our specific obligations under this legislation.

9.1 Privacy Officer

On Arrive Inc. has designated a Privacy Officer responsible for the protection of personal information and for overseeing compliance with applicable privacy laws. The Privacy Officer can be contacted at: info@caadapp.ca.

9.2 Privacy Impact Assessment (PIA)

When we develop new products, services, or processes that involve the collection or use of personal information, On Arrive Inc. conducts a Privacy Impact Assessment (PIA) to identify and mitigate potential privacy risks before implementation.

9.3 Confidentiality Incidents

In the event of a confidentiality incident involving personal information (unauthorized access, use, disclosure, loss, or destruction), On Arrive Inc. will:

• Assess the risk of injury to affected persons.
• Notify the Commission d'accès à l'information (CAI) if the incident presents a risk of serious injury.
• Notify affected individuals if a risk of serious injury is identified.
• Keep a register of all confidentiality incidents.

9.4 Data Minimization

We collect only personal information that is necessary for the identified purposes. We do not collect personal information beyond what is needed to respond to your inquiry or to operate this Site.

9.5 Retention and Secure Destruction

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal information is no longer needed, we destroy it securely using methods that prevent unauthorized access or reconstruction.

9.6 Right to Data Portability (effective September 22, 2024)

You have the right to receive personal information you provided to us in a structured, commonly used technological format, so that it can be communicated to another person or organization. To exercise this right, contact us at info@caadapp.ca.

9.7 Right to De-indexation

You have the right to request that we de-index personal information about you that is publicly accessible through technological means (e.g., search engines), or to cease disseminating it if it is disseminated contrary to law or is used for a purpose not envisaged at the time of collection.

9.8 Express, Free, and Informed Consent

When we collect personal information, we ensure that consent is:

• Manifest — clearly expressed, not implied from silence or inaction.
• Free — not conditioned on the provision of services, except where strictly necessary.
• Informed — you understand what you are consenting to and for what purpose.
• Given for a specific purpose — we do not use personal information for purposes other than those identified at the time of collection without obtaining renewed consent.

9.9 Commission d'accès à l'information du Québec (CAI)

If you are dissatisfied with how we have handled your personal information under Quebec's Law 25, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI):