Privacy Policy

1. Introduction and Overview

Welcome to TRD Freight, a digital services platform operated by TRD North Trucking Ltd, a Canadian corporation registered and headquartered at 153 Seeley Ave, Grey County, Ontario, N0C 1B0, Canada. This Privacy Policy explains in comprehensive detail how we collect, use, store, protect, disclose, and otherwise process your personal information when you access or use our website located at https://www.trdfreight.autos, any associated subdomains, mobile applications, application programming interfaces (APIs), and all related products and services that link to this policy (collectively referred to throughout this document as the Services or the Platform). This website and its associated platform were developed and are maintained by TRD Freight.

TRD North Trucking Ltd operates within the industry classifications of Computer Systems Design and Related Services, Professional, Scientific, and Technical Services, and Computer Integrated Systems Design. As a technology-forward logistics and systems integration company, we process various categories of data to deliver freight management solutions, dispatch optimization platforms, fleet telematics systems, and related technical consultancy services to our clients across Canada and internationally. Our dual role as both a freight operator and a technology provider means we handle operational logistics data alongside systems-level technical data, and this policy is structured to address both categories transparently.

By accessing, browsing, registering for, or otherwise using any part of the TRD Freight Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any provision contained herein, you must discontinue use of our Services immediately and refrain from providing any personal information to us. This Privacy Policy forms an integral part of our Terms of Service, and both documents should be read together to understand your full rights and obligations.

We are committed to protecting your privacy in accordance with applicable Canadian federal and provincial legislation, including but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada Anti-Spam Legislation (CASL), Ontario privacy statutes where applicable, and relevant international frameworks that may apply to cross-border data processing activities. This policy also addresses requirements arising from the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), to the extent that these laws may apply to our processing activities involving residents of those jurisdictions.

2. Information We Collect

We collect information in multiple categories, depending on the nature of your interaction with TRD Freight. The following subsections detail each category of data we may collect, the sources from which it originates, and the technical or business purpose underlying its collection. Not all categories apply to every user or every interaction; the specific information collected depends on which Services you use and how you engage with our Platform.

2.1 Personal Identification Information

When you create an account, submit a contact form, request a consultation, subscribe to our newsletter, or otherwise voluntarily provide information to us, we may collect the following personal identification details: your full legal name or preferred name, your email address, your telephone number (including mobile and landline), your job title or professional designation, the name of the company or organization you represent, your business or residential mailing address including street address, city, province or state, postal code, and country, your company website URL, and any other identifiers you choose to share with us through correspondence or form submissions. We collect this information to establish and maintain your account, to communicate with you regarding your inquiries, to provide the products and services you have requested, and to comply with legal and regulatory obligations applicable to our operations.

2.2 Business and Operational Data

In the course of delivering our freight logistics and computer systems design services to business clients, we may process operational data that includes but is not limited to: shipment identifiers, bill of lading numbers, carrier and consignee information, freight class and commodity descriptions, pickup and delivery addresses with timestamps, route plans and waypoint data, equipment and asset identifiers, warehouse location codes, customs documentation reference numbers, commercial invoice details, and other transportation-related operational records. This category of information is processed under the terms of our client service agreements and is handled with the highest standards of data governance, access control, and confidentiality protections appropriate to the logistics and supply chain industry.

2.3 Technical and Device Information

When you interact with our website or digital platforms, our systems automatically collect certain technical information about the device and connection you use. This includes your Internet Protocol (IP) address, which may reveal your approximate geographic location at the city or regional level; your browser type and version; your operating system type and version; your device type, manufacturer, and model; your screen resolution and viewport dimensions; your preferred language settings; the referring website or source that directed you to our Platform; the pages you visit on our site, the duration of your visit, and your navigation patterns; timestamps of your interactions; and any error logs or crash reports generated during your session. This data is essential for diagnosing technical issues, maintaining the security and integrity of our Platform, analyzing aggregate usage trends, and improving the functionality and user experience of our Services.

2.4 Communication Records

We maintain records of our communications with you, including but not limited to: emails exchanged between you and TRD Freight personnel, transcripts and recordings of telephone conversations (with prior notice and consent where required by law), live chat logs and chatbot interaction histories, support ticket contents and resolution notes, meeting notes and consultation summaries, and any files, documents, or attachments you transmit to us in the course of our business relationship. These records are retained for quality assurance purposes, for reference in ongoing and future service engagements, to resolve disputes should they arise, and to comply with record-keeping obligations under applicable commercial and tax laws.

2.5 Payment and Transaction Information

If you engage us for paid services, we process transaction-related information necessary to complete billing and invoicing. This includes the billing contact name and address, payment method details (such as credit card type and last four digits, or bank account details for wire transfers), invoice numbers and amounts, payment dates and status, and purchase order references. Full credit card numbers, card verification values (CVV), and complete bank account credentials are processed exclusively by our PCI-DSS-compliant third-party payment processors and are never stored or accessible on TRD Freight servers or internal systems.

3. How We Collect Information

We collect information through multiple channels and methods, each of which is designed to be transparent and proportionate to the services being provided. The following list identifies the principal collection methods we employ across our Platform and business operations.

3.1 Direct Collection from You

The majority of the personal information we process is provided directly by you through voluntary actions. These include: filling out and submitting the contact form on our website; sending an email to any trdfreight.autos email address; calling our business telephone number and engaging in conversation with our representatives; registering for an account through our Platform; subscribing to marketing communications, newsletters, or product updates; participating in surveys, feedback requests, or user research sessions; uploading documents, specifications, or project requirements through our client portal; and attending in-person meetings, trade shows, or industry events where you share your contact details with our team.

3.2 Automated Collection Through Technology

As you navigate and interact with our website, we use various automated technologies to collect technical data. These include server logs that record page requests, response codes, and traffic patterns; web beacons and tracking pixels embedded in our emails and web pages that detect opens and interactions; session replay and heatmap tools that help us understand how users interact with page layouts (with sensitive fields automatically masked); and analytics scripts that aggregate behavioral metrics for performance monitoring. All automated collection is governed by our Cookie Policy (Section 5 of this document) and can be managed through your browser settings and our consent management platform.

3.3 Collection from Third-Party Sources

In limited circumstances, we may receive information about you from third-party sources. These sources may include: publicly accessible business registries and corporate databases used to verify company information; credit reference agencies and financial institutions for payment verification purposes; marketing data providers and lead generation platforms where you have consented to have your information shared with businesses like TRD North Trucking Ltd; professional networking platforms and industry directories where you have publicly listed your professional profile; and referral partners and existing clients who recommend our services with your knowledge and implied consent. When we receive data from third parties, we take reasonable steps to verify that the data was lawfully collected and that we have a legitimate basis for processing it.

4. How We Use Your Information

The information we collect serves specific, defined purposes that are directly related to the delivery of our freight logistics and computer systems design services. We do not use your information for purposes incompatible with those described below without first providing notice and, where required by law, obtaining your consent.

4.1 Service Delivery and Operations

We use your information primarily to provide, maintain, and improve the Services you have requested. This includes: processing and fulfilling service orders and project engagements; configuring, deploying, and maintaining custom software systems and integrations for your organization; coordinating freight shipments, dispatching loads, and managing logistics operations; providing technical support, troubleshooting, and incident response; delivering training, documentation, and knowledge transfer; managing user accounts, authentication, and access controls; and communicating with you regarding service updates, maintenance windows, system status changes, and account-related notifications that are essential to the ongoing operation of the Services you receive.

4.2 Business Development and Marketing

With your consent where required, we may use your contact information to: send you newsletters, industry insights, case studies, white papers, and product announcements that may be relevant to your business interests; invite you to webinars, events, product demonstrations, and training sessions; conduct market research and solicit feedback on our existing and prospective service offerings; and personalize the content and advertisements you see when you visit our website or interact with our digital communications. You may opt out of marketing communications at any time by clicking the unsubscribe link included in every marketing email, by adjusting your communication preferences in your account settings, or by contacting us directly at contact@trdfreight.autos. Even after opting out of marketing, you will continue to receive transactional and service-related communications that are necessary for the operation of your account and the delivery of services you have contracted.

4.3 Legal Compliance and Protection

We may process your information as necessary to: comply with applicable federal, provincial, and municipal laws, regulations, court orders, and governmental requests; enforce our Terms of Service and other contractual agreements; investigate, prevent, and defend against actual or potential fraud, security breaches, illegal activities, and violations of our policies; protect the rights, property, and safety of TRD North Trucking Ltd, our employees, our clients, and the general public; and establish, exercise, or defend against legal claims in any jurisdiction where we operate or where our Services are accessed.

4.4 Research, Analytics, and Product Improvement

We analyze aggregated and de-identified datasets derived from the information we collect to: understand usage patterns, feature adoption, and user behavior trends across our Platform; identify areas for performance optimization, user interface improvements, and new feature development; benchmark our service levels, response times, and reliability metrics against industry standards; train machine learning models used for route optimization, load matching, and predictive analytics in our logistics platforms; and publish industry reports, trend analyses, and thought leadership content that does not identify any individual person or company. Whenever feasible, we use aggregated, anonymized, or pseudonymized data for these purposes to minimize privacy impact.

5. Cookies and Tracking Technologies

TRD Freight uses cookies, local storage objects, and similar tracking technologies on our website and digital platforms. This section explains what these technologies are, how we use them, and how you can control them.

5.1 What Are Cookies

A cookie is a small text file that a website stores on your computer or mobile device when you visit it. Cookies enable the website to remember your actions and preferences (such as login status, language selection, font size, and other display preferences) over a period of time, so you do not have to re-enter them whenever you return to the site or browse from one page to another. Cookies may be set by the website you are visiting (first-party cookies) or by other websites that provide services or content on the page you are viewing (third-party cookies). Cookies can be session-based, meaning they are automatically deleted when you close your browser, or persistent, meaning they remain on your device for a predefined duration or until you manually delete them.

5.2 Categories of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be disabled in our systems. They enable core functionality such as page navigation, secure authentication, session management, and access to protected areas of the site. Without these cookies, the website cannot function properly and the Services you have requested cannot be provided.

Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often, how visitors navigate between pages, and whether they encounter error messages. The information collected is aggregated and anonymized, and it is used exclusively to measure and improve the performance of our site. We use privacy-focused analytics solutions that minimize the collection of personally identifiable information while providing meaningful usage insights to our operations and development teams.

Functional Cookies: These cookies allow our website to remember choices you make (such as your language preference, the region you are in, or your preferred contact method) and provide enhanced, more personalized features. They may also be used to provide services you have requested, such as watching a video or commenting on a blog. The information these cookies collect may be anonymized, and they cannot track your browsing activity on other websites.

Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns. We use these cookies sparingly and primarily for retargeting campaigns on professional platforms such as LinkedIn, where our services may be relevant to logistics and technology professionals. We do not engage in behavioral advertising networks that build detailed profiles of individual browsing habits across unrelated websites.

5.3 Managing Your Cookie Preferences

You have full control over cookie settings. Upon your first visit to our website, a cookie consent banner will appear, allowing you to accept or decline non-essential cookies by category. You can also manage cookies through your web browser settings. Most modern browsers allow you to: view the cookies currently stored on your device; delete individual cookies or all cookies at once; block third-party cookies by default; block cookies from specific websites; and set the browser to notify you when a cookie is set so you can decide whether to accept it on a case-by-case basis. Please note that disabling certain categories of cookies may affect the functionality and user experience of our website. For detailed instructions on managing cookies in your specific browser, please refer to the help documentation provided by your browser vendor.

6. Data Sharing and Disclosure

We do not sell, rent, lease, or trade your personal information to any third party for monetary or other valuable consideration. We share information only in the limited circumstances described below, and always under appropriate contractual and security safeguards designed to protect your data to a standard commensurate with this Privacy Policy.

6.1 Service Providers and Subprocessors

We engage carefully selected third-party companies and individuals to perform functions on our behalf as service providers or data subprocessors. These functions include: cloud infrastructure hosting and content delivery; payment processing and billing; email delivery and marketing automation; customer relationship management and support ticketing; website analytics and performance monitoring; security scanning and vulnerability assessment; and professional services such as accounting, legal counsel, and audit support. Each service provider is bound by a written data processing agreement that restricts their use of your information to the specific purposes for which we engaged them, requires them to implement appropriate technical and organizational security measures, and obligates them to comply with applicable data protection laws. We conduct due diligence on all service providers before engagement and periodically review their compliance with our contractual requirements.

6.2 Business Transfers

In the event that TRD North Trucking Ltd is involved in a merger, acquisition, reorganization, sale of all or a substantial portion of its assets, or similar corporate transaction, your personal information may be transferred to the successor or acquiring entity as part of that transaction. We will notify you of any such change in ownership or control of your personal information, as well as any choices you may have regarding your information. The successor entity will be bound by the terms of this Privacy Policy, or a policy that provides at least equivalent protection, with respect to data collected before the transaction, unless and until you consent to revised terms.

6.3 Legal Disclosure Obligations

We may disclose your personal information if we determine in good faith that such disclosure is reasonably necessary to: comply with a valid legal process, including a subpoena, court order, search warrant, or other legally enforceable request from a governmental authority with competent jurisdiction; enforce or apply our Terms of Service and other contractual agreements; investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, security incidents, or violations of our policies; protect the rights, property, or personal safety of TRD North Trucking Ltd, our employees, our clients, our users, or members of the public, as required or permitted by law; and establish or defend against legal claims of any nature. In all such cases, we will endeavor to provide you with advance notice of the disclosure, unless we are legally prohibited from doing so or unless providing notice would compromise an ongoing investigation or pose a risk of harm to individuals.

6.4 With Your Consent

We may share your personal information with third parties for purposes not described in this Privacy Policy when we have obtained your explicit, informed consent to do so. You may withdraw your consent to such sharing at any time by contacting us, though withdrawal will not affect the lawfulness of processing carried out before the withdrawal took effect.

7. Data Retention Policies

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required or permitted by applicable law. Our retention periods are determined based on the following criteria, applied on a case-by-case basis for each category of data: the nature, sensitivity, and volume of the personal information; the purpose and context for which the information was collected; the potential risk of harm from unauthorized use or disclosure; the duration of our contractual or business relationship with you; whether there are ongoing legal or regulatory obligations that require us to maintain the records; and whether the data is subject to any litigation hold or preservation order. Upon expiry of the applicable retention period, we securely delete, destroy, or anonymize the data using industry-standard methods such as cryptographic erasure, secure shredding, or irreversible de-identification. In certain cases, we may retain anonymized or aggregated datasets derived from personal information indefinitely for research, statistical, or product development purposes, as such data can no longer be associated with an identifiable individual.

7.1 Specific Retention Schedules

Account and profile information is retained for the duration of your account being active, plus a period of two (2) years following account closure or the end of our last business engagement, to facilitate any post-engagement support, warranty obligations, or reactivation requests. Communication records including emails and support tickets are retained for a period of three (3) years from the date of the last communication in the thread, to support quality assurance, dispute resolution, and compliance auditing. Transaction and billing records are retained for a period of seven (7) years from the date of the transaction, in accordance with applicable tax, accounting, and commercial record-keeping requirements under Canadian federal and provincial law. Website server logs and analytics data are retained in identifiable form for a maximum of twenty-six (26) months, after which they are either deleted or fully anonymized and aggregated. Marketing consent records are retained indefinitely or until consent is withdrawn, as evidence of our compliance with anti-spam and electronic marketing regulations.

8. Data Security Measures

TRD North Trucking Ltd implements and maintains a comprehensive information security program designed to protect the confidentiality, integrity, and availability of your personal information against unauthorized access, disclosure, alteration, destruction, or loss. Our security framework is aligned with recognized industry standards and is continuously reviewed and improved in response to evolving threats, technological advances, and changes in our operational environment.

8.1 Technical Safeguards

Our technical security measures include: encryption of data in transit using Transport Layer Security (TLS) protocol version 1.2 or higher for all communications between your browser and our servers, as well as for all internal service-to-service communications; encryption of sensitive data at rest using AES-256 encryption standards applied at the storage layer; network-level protections including firewalls, intrusion detection and prevention systems (IDS/IPS), and regular vulnerability scanning; endpoint protection including anti-malware software, device encryption, and patch management on all company-issued devices; multi-factor authentication enforced for all administrative accounts and privileged access to production systems; strict role-based access controls and the principle of least privilege applied to all data stores and processing environments; automated monitoring, logging, and alerting for anomalous activities across our infrastructure; and regular third-party penetration testing and security assessments conducted at minimum on an annual basis by qualified independent security firms.

8.2 Organizational Safeguards

Our organizational security measures include: mandatory data protection and security awareness training for all TRD North Trucking Ltd employees and contractors, delivered during onboarding and refreshed annually; comprehensive background checks conducted on personnel with access to sensitive systems or data; documented information security policies and procedures that are reviewed and updated at least annually; a designated Privacy Officer responsible for overseeing compliance with this policy and applicable data protection laws; a formal incident response plan with defined escalation paths, roles, and communication protocols; contractual data protection obligations imposed on all third-party service providers through data processing agreements; regular internal audits of data access logs, permission assignments, and security control effectiveness; and a strict clean desk and secure disposal policy for physical documents and storage media that may contain personal or confidential information.

8.3 Your Role in Security

While we employ robust security measures, no method of electronic transmission or storage is one hundred percent secure. You also have an important role to play in protecting your information. We strongly recommend that you: use a strong, unique password for your TRD Freight account and do not reuse it across other services; enable multi-factor authentication when available; keep your devices, operating systems, and browsers updated with the latest security patches; avoid accessing your account from public, unsecured Wi-Fi networks; log out of your account when using shared or public devices; and notify us immediately at contact@trdfreight.autos if you suspect any unauthorized access to or use of your account or personal information.

9. Your Rights and Choices

Depending on your jurisdiction of residence and the nature of your relationship with TRD North Trucking Ltd, you may have certain rights regarding your personal information. We respect these rights and have established mechanisms to facilitate their exercise. This section describes the rights that may be available to you, along with the procedures for asserting them.

9.1 Right of Access

You have the right to request confirmation of whether we process personal information about you, and if so, to receive a copy of that personal information along with details about the categories of data processed, the purposes of processing, the categories of third parties to whom the data has been or will be disclosed, the expected retention period, and the source of the data if it was not collected directly from you. We will respond to access requests within thirty (30) calendar days, or as otherwise required by applicable law. The first copy provided in any twelve-month period will be furnished free of charge; we may charge a reasonable administrative fee for additional copies.

9.2 Right of Rectification

You have the right to request that we correct, update, or complete any personal information we hold about you that is inaccurate, incomplete, or outdated. You can update certain categories of information directly through your account settings interface. For information that cannot be self-managed, please contact us with details of the correction sought, and we will process your request within a reasonable timeframe, typically fifteen (15) business days.

9.3 Right of Erasure

You have the right to request the deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw the consent on which the processing was based and there is no other legal ground for processing, when you object to the processing and there are no overriding legitimate grounds, or when the data has been unlawfully processed. We will assess each deletion request against our legal obligations and legitimate business needs. Where we are unable to delete your data in its entirety — for example, because we are required by law to retain certain records — we will inform you of the specific reasons and the retention period that applies.

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain situations, including: while we verify the accuracy of data that you have contested; when the processing is unlawful but you oppose erasure and request restriction instead; when we no longer need the data for the original purposes but you require it for the establishment, exercise, or defense of legal claims; and while we verify whether our legitimate grounds override your objection to processing. During a restriction period, we will store your data but not otherwise process it without your consent, except for the establishment, exercise, or defense of legal claims or for the protection of another person's rights.

9.5 Right to Data Portability

Where processing is carried out by automated means and is based on your consent or on a contractual necessity, you have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to have that data transmitted directly to another data controller where technically feasible. We will provide the data in a standard format such as CSV, JSON, or XML, depending on the nature of the data and the technical capabilities of our systems.

9.6 Right to Object

You have the right to object, on grounds relating to your particular situation, to the processing of your personal information where the legal basis for that processing is our legitimate interests or the performance of a task carried out in the public interest. You also have an absolute right to object to the processing of your personal information for direct marketing purposes at any time, without needing to provide any justification. Upon receiving a valid objection, we will cease processing for the relevant purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

9.7 Exercising Your Rights

To exercise any of the rights described in this section, please contact us using the details provided in Section 20 (Contact, Complaints, and Inquiries). To protect your privacy and security, we will take reasonable steps to verify your identity before processing your request, which may include requesting that you provide proof of identity, answer security questions associated with your account, or confirm certain details of your interaction history with TRD Freight. We aim to respond to all rights requests within thirty (30) calendar days. If we require more time due to the complexity or volume of the request, we will inform you within the initial thirty-day period and provide an estimated timeline for completion.

10. International Data Transfers

TRD North Trucking Ltd is headquartered in Canada, and our primary data processing infrastructure is located within Canadian data centers. However, certain service providers we engage may process data in other jurisdictions, including the United States of America, member states of the European Union, and other countries where our cloud infrastructure providers maintain data center facilities. When we transfer personal information across international borders, we implement appropriate safeguards to ensure that the data receives a level of protection equivalent to that provided under Canadian law and this Privacy Policy.

10.1 Transfer Safeguards

For transfers to countries that have not been recognized by the relevant authorities as providing an adequate level of data protection, we rely on appropriate transfer mechanisms, which may include: standard contractual clauses approved by the relevant data protection authorities; binding corporate rules for intra-group transfers; explicit and informed consent obtained from the data subject for the specific transfer; or other legally recognized transfer mechanisms available under applicable data protection legislation. We assess the legal framework of the destination jurisdiction, including any government surveillance laws that may affect data protection, and implement supplementary technical, contractual, and organizational measures where necessary to bring the level of protection up to the required standard.

11. Children and Minor Privacy

The TRD Freight Platform is intended for use exclusively by individuals who are at least eighteen (18) years of age or the age of majority in their jurisdiction of residence, whichever is higher. Our Services are not designed for, marketed to, or directed at children under the age of majority, and we do not knowingly collect, solicit, process, or retain personal information from anyone under that age. If we become aware that we have inadvertently collected personal information from an individual below the age threshold without verifiable parental consent, we will take immediate steps to delete that information from our systems and terminate any associated account or registration. If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at contact@trdfreight.autos so that we can take prompt remedial action.

12. Third-Party Services and Integrations

Our Platform may contain links to third-party websites, services, and applications that are not owned, operated, or controlled by TRD North Trucking Ltd. Additionally, we may offer integrations with third-party platforms such as cloud storage providers, enterprise resource planning systems, transportation management systems, and communication tools that you may choose to connect to your TRD Freight account. This Privacy Policy does not apply to any third-party website, service, or application, even if it is accessible through a link on our Platform or integrated with our Services.

12.1 Third-Party Practices

We do not control, endorse, or assume responsibility for the privacy practices, content, or security of any third-party service. Before providing any personal information to or through a third-party service, we strongly encourage you to review that service's privacy policy, terms of service, and security practices independently. When you authorize an integration between your TRD Freight account and a third-party service, you are directing us to share data with that third party according to the scope and purposes of the integration as presented to you at the time of authorization. You may manage or revoke these integration permissions at any time through your account settings or by contacting us. Revocation will stop future data sharing with the third party but will not affect data already transferred before the revocation.

12.2 Embedded Content

Our website may include embedded content such as videos, maps, and interactive charts that are hosted by third-party providers like YouTube, Google Maps, and Vimeo. Embedded content from third-party websites behaves exactly as if you had visited the other website directly. These third-party sites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that third-party website. We do not have control over and assume no liability for the data collection practices of providers of embedded content. You should review the privacy policies of those providers to understand their data handling practices.

13. Data Breach Notification Protocol

TRD North Trucking Ltd has established a formal data breach response and notification protocol to address any incident involving the unauthorized access, acquisition, use, disclosure, alteration, or destruction of personal information under our control. This protocol is designed to ensure prompt containment, thorough investigation, and timely notification in compliance with Canadian federal and provincial breach notification requirements, as well as any applicable international obligations.

13.1 Breach Identification and Containment

Upon detection of a suspected or confirmed data breach, our incident response team is immediately activated. The initial phase focuses on containing the breach to prevent further unauthorized access or data loss, which may involve isolating affected systems, revoking compromised credentials, blocking malicious IP addresses, and deploying emergency security patches. Simultaneously, we initiate a forensics investigation to determine the scope, cause, and impact of the breach, including the categories and approximate number of individuals affected, the categories and volume of personal information involved, and the likely consequences of the breach for affected individuals.

13.2 Notification to Affected Individuals

Where a breach creates a real risk of significant harm to affected individuals — considering factors such as the sensitivity of the compromised data, the likelihood of misuse, and the nature of any potential harm — we will notify affected individuals without unreasonable delay. Notification will be provided directly to the individual through the most appropriate channel available (email, telephone, postal mail) and will include: a description of the nature and circumstances of the breach; the date or approximate timeframe of the breach; the categories of personal information involved; a description of the steps we have taken to contain and mitigate the breach; recommended steps that affected individuals can take to protect themselves from potential harm; and our contact information for further inquiries. In certain circumstances, if direct notification is impracticable, we may provide substitute notice through public announcements, media notices, or prominent postings on our website.

13.3 Regulatory Notification

We will notify the Office of the Privacy Commissioner of Canada and any applicable provincial privacy commissioners of breaches that meet the statutory reporting thresholds under Canadian law. We will also notify relevant regulatory authorities in other jurisdictions where notification is required by applicable data protection legislation, such as supervisory authorities in EU member states under the GDPR. All regulatory notifications will be made within the timeframes prescribed by the relevant legislation and will include the information required by the applicable statutory framework.

14. Consent Mechanisms and Withdrawal

The collection, use, and disclosure of your personal information by TRD North Trucking Ltd is grounded in principles of knowledge and consent, consistent with the requirements of PIPEDA and other applicable privacy legislation. We obtain your consent through various mechanisms depending on the nature, sensitivity, and context of the information being processed.

14.1 Forms of Consent

Consent may be express or implied. Express consent is obtained when you take a clear affirmative action to indicate your agreement, such as checking an unchecked consent box, signing a consent form, or providing a verbal confirmation. Implied consent may be inferred from your actions or the circumstances when the purpose of the collection, use, or disclosure would be reasonably obvious to a reasonable person in the context — for example, when you provide your email address in a contact form for the purpose of receiving a response from us. For the collection, use, or disclosure of sensitive personal information, we will always seek express consent. For secondary purposes such as marketing communications, we will obtain opt-in consent where required by law.

14.2 Withdrawal of Consent

You may withdraw your consent to our processing of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, you may use the unsubscribe mechanisms provided in our communications, adjust your account settings, or contact us directly through the channels listed in Section 20. We will process your withdrawal request within a reasonable timeframe and inform you of the implications of withdrawal, which may include our inability to provide certain Services that depend on the continued processing of the information. Withdrawal of consent does not have retroactive effect and does not affect the lawfulness of processing carried out before the withdrawal.

15. Automated Decision-Making

In the course of delivering our computer integrated systems design and freight logistics services, TRD Freight develops and operates systems that may employ automated processing and algorithmic decision-making to enhance efficiency, accuracy, and service quality. This section describes our approach to automated processing and your rights in relation to it.

15.1 Algorithms in Logistics Operations

Our logistics platforms may use algorithms to perform functions such as: matching available freight loads with suitable carriers based on equipment type, route compatibility, and service history; optimizing route plans based on distance, traffic patterns, fuel efficiency, and delivery windows; calculating estimated times of arrival using real-time GPS telemetry and historical performance data; and flagging anomalous patterns in shipment data that may indicate operational issues, compliance risks, or opportunities for process improvement. These automated processes are decision-support tools that augment, rather than replace, human judgment by dispatchers, logistics coordinators, and operations managers.

15.2 No Solely Automated Decisions with Legal Effect

We do not currently make decisions that produce legal effects concerning you or similarly significantly affect you based solely on automated processing, including profiling, without meaningful human involvement. Should our practices change in the future to include such decisions, we will update this Privacy Policy accordingly, implement safeguards including the right to obtain human intervention, and provide you with meaningful information about the logic involved, the significance, and the envisaged consequences of such processing for you.

16. Employee and Contractor Information

In addition to the information we collect from clients, website visitors, and users of our Services, we also process personal information relating to our current, former, and prospective employees, independent contractors, consultants, and job applicants. This section briefly outlines how we handle such information, though detailed provisions are set forth in separate internal policies applicable to our personnel.

16.1 Scope of Employee Data Processing

We collect and process employee and contractor personal information that is reasonably necessary for the establishment, management, and termination of the employment or contractual relationship. This may include: identification and contact information; social insurance numbers and tax identifiers for payroll and remittance purposes; banking details for direct deposit; emergency contact information; employment history, qualifications, and professional credentials; performance evaluations and training records; benefits enrollment and administration data; time and attendance records; and workplace communications. Employee data is maintained in secure, access-controlled systems and is retained in accordance with employment standards legislation, tax regulations, and our internal records management policy.

17. Canadian Privacy Law Compliance (PIPEDA)

As a Canadian corporation operating in the province of Ontario, TRD North Trucking Ltd is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law, as well as substantially similar provincial legislation where applicable. This section outlines our compliance with the key principles of PIPEDA and how they are operationalized within our data governance framework.

17.1 Accountability

We are responsible for personal information under our control and have designated a Privacy Officer who is accountable for our compliance with PIPEDA and the principles set forth in this Privacy Policy. Our Privacy Officer's contact information is provided in Section 20 of this document. We have implemented policies, procedures, and training to give effect to our privacy commitments and hold all personnel accountable for adherence.

17.2 Identifying Purposes

We identify and document the purposes for which we collect personal information at or before the time of collection. These purposes are set forth in this Privacy Policy (see Section 4 above) and are communicated to individuals through this policy and through just-in-time notices presented at the point of data collection on our website and digital platforms. We do not use or disclose personal information for new purposes without first identifying and documenting those purposes and, where required, obtaining fresh consent.

17.3 Limiting Collection, Use, Disclosure, and Retention

We limit the collection of personal information to that which is necessary for the purposes we have identified. We collect information by fair and lawful means and do not engage in deceptive or misleading collection practices. We limit the use and disclosure of personal information to the purposes for which it was collected, except with consent or as required by law. Our retention policies (Section 7) ensure that personal information is retained only as long as necessary for the fulfillment of those purposes and is securely destroyed thereafter. We commit to not disposing of, deleting, or cancelling any individual's information without a confirmed, documented request from the data subject to do so, except where retention has reached its lawful limit.

17.4 Accuracy, Safeguards, and Openness

We maintain personal information in as accurate, complete, and up-to-date a form as is necessary for the purposes for which it is to be used, and we encourage individuals to help us keep their information current by using the correction mechanisms described in Section 9. We protect personal information with security safeguards appropriate to the sensitivity of the information, as described in Section 8 of this policy. We make readily available to individuals specific information about our policies and practices relating to the management of personal information, primarily through this Privacy Policy and through direct responses to inquiries submitted to our Privacy Officer.

17.5 Individual Access and Challenging Compliance

Upon request, we will inform an individual of the existence, use, and disclosure of their personal information and will give them access to that information, subject to limited and specific exceptions provided by law. Individuals may challenge our compliance with PIPEDA and this Privacy Policy by contacting our Privacy Officer (Section 20) and, if unsatisfied with our response, by filing a complaint with the Office of the Privacy Commissioner of Canada.

18. United States Privacy Law Compliance

Although TRD North Trucking Ltd is a Canadian corporation, we recognize that our website and Services may be accessed by residents of the United States of America, and that certain U.S. state privacy laws may apply to our processing of personal information belonging to those residents. This section addresses our compliance posture with respect to the principal U.S. privacy laws.

18.1 California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

To the extent that the CCPA and CPRA apply to TRD North Trucking Ltd, California residents have the rights enumerated in Section 9 of this policy, which align substantially with the consumer rights framework established under California law. Specifically, California consumers have the right to know what personal information is collected, used, shared, or sold; the right to delete personal information held by businesses; the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising; the right to non-discrimination in terms of price or service when a consumer exercises a privacy right; and the right to limit the use and disclosure of sensitive personal information. We confirm that TRD North Trucking Ltd does not sell personal information as that term is defined under the CCPA, nor do we share personal information for cross-context behavioral advertising. We do not process the sensitive personal information of California consumers for purposes other than those expressly permitted under CPRA, namely: to provide the goods and services reasonably expected by an average consumer, to detect security incidents, to resist malicious or illegal actions, to ensure the physical safety of natural persons, for short-term transient use (including non-personalized advertising), to perform services on behalf of the business, or to verify and maintain the quality or safety of our Services. California residents may exercise their rights by contacting us through any of the methods listed in Section 20. We will verify requests using the procedures described in Section 9.7 and will respond in accordance with the timelines mandated by California law.

18.2 Other State Privacy Laws

We are monitoring developments in U.S. state comprehensive privacy legislation — including the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and similar laws enacted or proposed in other states — and we are committed to updating our practices and this Privacy Policy as needed to maintain compliance with applicable requirements. If you are a resident of a U.S. state with a comprehensive privacy law and believe that your rights under that law are not adequately addressed by this policy, please contact us so that we may evaluate and respond to your specific concerns.

19. Changes to This Privacy Policy

TRD North Trucking Ltd reserves the right to update, modify, or amend this Privacy Policy at any time, at our sole discretion, to reflect changes in our data processing practices, legal obligations, operational requirements, or the evolving regulatory landscape. We are committed to providing meaningful transparency regarding any such changes and their implications for you.

19.1 Notification of Changes

When we make material changes to this Privacy Policy, we will provide notice through one or more of the following channels, as appropriate for the significance and scope of the change: posting a prominent notice on our website homepage for a period of at least thirty (30) calendar days; sending an email notification to the address associated with your account; displaying a banner or modal notification upon your next login to the Platform; and updating the Last Updated date at the top of this Privacy Policy, which also serves as a record of the most recent revision. Changes that are purely administrative, typographical, or clarificatory in nature may be made without advance notice, and such changes will be effective immediately upon posting.

19.2 Your Continued Use

The updated Privacy Policy will specify the date on which it becomes effective (the Effective Date). Your continued use of the TRD Freight Platform, website, or Services after the Effective Date constitutes your acknowledgment and acceptance of the updated terms, to the fullest extent permitted by applicable law. If you do not agree with the revised Privacy Policy, you must discontinue use of our Services before the Effective Date and may request deletion of your personal information in accordance with Section 9.3. We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices. This Privacy Policy was last reviewed, updated, and approved by the management of TRD North Trucking Ltd on July 31, 2026.

20. Contact, Complaints, and Inquiries

TRD North Trucking Ltd is committed to resolving questions, concerns, and complaints about your privacy and our collection, use, or disclosure of your personal information in a fair, timely, and transparent manner. If you have any questions or concerns regarding this Privacy Policy, your personal information, or our data handling practices, we encourage you to reach out to us through any of the channels listed below. We will acknowledge receipt of your inquiry within five (5) business days and aim to provide a substantive response within thirty (30) calendar days.

20.1 Primary Contact Channels

You may contact our Privacy Officer and general inquiries team through the following means:

• Email (Primary): contact@trdfreight.autos — Please include the subject line ATTENTION: PRIVACY OFFICER for matters specifically related to this Privacy Policy, data access requests, or the exercise of your privacy rights. For general inquiries, you may use any appropriate subject line describing the nature of your message.
• Telephone: +1 (484) 414-9733 — Our office hours are Monday through Friday, 9:00 AM to 5:00 PM Eastern Time (UTC-5 / UTC-4 during Daylight Saving Time). Voicemail messages left outside of business hours will be returned on the next business day. Please note that for security and verification purposes, we may not be able to fulfill certain privacy-related requests received exclusively by telephone, and we may direct you to submit your request in writing via email or postal mail for documentation and audit trail purposes.
• Postal Mail: TRD North Trucking Ltd, ATTN: Privacy Officer, 153 Seeley Ave, Grey County, Ontario, N0C 1B0, Canada. Please include a return address, email address, or telephone number so that we may respond to your correspondence. Certified or registered mail is recommended for time-sensitive or legally significant communications.
• Website: https://www.trdfreight.autos — You may also use the contact form on our homepage to submit general inquiries. For privacy-specific matters, email is the preferred and fastest channel, as our contact form is monitored as part of our general business communications workflow rather than our dedicated privacy intake process.

20.2 Formal Complaints

If you are not satisfied with our response to your inquiry or complaint, or if you believe that your privacy rights have been violated by our data handling practices, you have the right to lodge a complaint with the appropriate supervisory authority. In Canada, the primary oversight body is the Office of the Privacy Commissioner of Canada (OPC), which can be contacted by telephone at 1-800-282-1376, through their website at www.priv.gc.ca, or by mail at 30 Victoria Street, Gatineau, Quebec, K1A 1H3, Canada. Residents of Ontario may also contact the Information and Privacy Commissioner of Ontario (IPC) at 2 Bloor Street East, Suite 1400, Toronto, Ontario, M4W 1A8, by telephone at 1-800-387-0073, or through www.ipc.on.ca. For residents of the European Union and European Economic Area, you may lodge a complaint with the data protection supervisory authority in your country of residence or the country where the alleged infringement occurred. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a supervisory authority, and we encourage you to contact us first so that we may attempt to resolve the matter informally and efficiently.

20.3 Developer Contact

This website was developed and is maintained by TRD Freight, which operates as the technology development arm of TRD North Trucking Ltd. For inquiries specifically related to the technical operation, maintenance, accessibility, or security of this website and its associated digital infrastructure — as distinct from inquiries regarding privacy policy interpretation, data subject rights, or regulatory compliance — you may address your correspondence to the development team through the same primary contact channels listed above, with the subject line ATTENTION: DEVELOPMENT TEAM. Please note that the Privacy Officer retains ultimate accountability for all privacy-related matters, including those that intersect with website and platform development.