Information we collect
When you place an order, we collect the driver’s name, driver’s licence number, email address, order reference, payment status, amount paid, and timestamps related to fulfillment and delivery. For a CVOR Driver Abstract order, we also collect the country, province or state, and postal or ZIP code. We also receive routine technical information such as request logs needed to operate and secure the website.
Stripe processes card payments. We do not receive or store your full payment card number or security code.
How we use information
- To verify payment and create the order
- To submit the information to the Ontario record-issuing system
- To retrieve and email the requested PDF
- To provide customer support and investigate delivery problems
- To prevent misuse and maintain transaction records
- To comply with applicable legal obligations
Service providers
We use service providers to run the website and complete orders. They include Cloudflare for website hosting and order data, Stripe for payment processing, DigitalOcean for the private automation server, Google for receiving some fulfillment emails and for advertising measurement, and Resend for customer email delivery. Each provider processes information for its role in the service and under its own terms and privacy practices.
Advertising measurement
The website loads Google’s measurement script. If you arrive from one of our ads, Google sets cookies in your browser and, after a completed order, receives the order amount and an order reference so the ad can be credited. This measurement never includes your name, licence number, or the contents of your record, and we have turned off Google’s ad-personalization signals.
Document handling and retention
A temporary working copy of the driver record PDF is deleted from the automation server after successful delivery. A PDF kept because a delivery attempt failed is scheduled for automatic deletion after 72 hours. Diagnostic screenshots are scheduled for deletion after 24 hours and are not taken on the card-entry page.
Local automation tickets are protected as private files. Customer-identifying fields in those tickets are automatically redacted 180 days after delivery, or after the original order date for an abandoned exception. A limited, redacted transaction entry may remain for accounting, abuse prevention and operational auditing. Source messages for products delivered to us by email, and the messages we send to customers, may remain with our email providers for support and record-keeping. Other order details remain in secured order systems for as long as reasonably necessary to provide the service, resolve issues, maintain business records, protect against misuse, and meet legal obligations.
Sharing
We do not sell personal information. We disclose it only to the systems and providers needed to fulfill the order, when you direct us to do so, or when disclosure is required by law.
Safeguards and cross-border processing
We use access controls, encrypted connections and restricted service credentials appropriate to a small online service. No online system is risk-free. Some providers may process or store information outside Ontario or Canada, where it can be subject to local law.
Your choices
You can ask about the personal information connected with your order, request a correction, or request deletion where we are not required to keep the information. Contact info@mydriversabstract.ca. We may need to verify your identity before acting on a request.
Policy updates
We may update this policy when the service or its providers change. The effective date at the top identifies the current version.