Privacy policy
Privacy Policy
Personal information, PIPEDA, and Quebec Law 25.
Questions? legal@lastmile.express
Introduction and scope
Last Mile Express is operated by UCHAAPKO INC (“Company”, “we”, “us”, “our”). Registered office: 190 Beebalm Cres, Nepean, ON, K2J 7G7. Legal inquiries: legal@lastmile.express. Website: https://lastmile.express.
This Privacy Policy describes how we handle personal information when you visit https://lastmile.express, request a quote, ship with Last Mile Express, receive a delivery, apply to drive or contract with us, or use workspace tools we make available (including mail, dispatch, or partner portals where offered).
“Personal information” means information about an identifiable individual, as defined under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec’s Act respecting the protection of personal information in the private sector (Law 25).
This policy applies to information we control as an organization. It does not apply to third-party websites, apps, or services linked from our site, which are governed by their own policies.
Privacy Officer and contact
Privacy inquiries and access requests may be directed to our Privacy Officer at legal@lastmile.express (subject line: “Privacy request”) or by mail to UCHAAPKO INC, 190 Beebalm Cres, Nepean, ON, K2J 7G7, Attn: Privacy Officer.
Personal information we collect
Depending on your relationship with us, we may collect the categories below.
Customers and shippers
When you request a quote, open an account, or ship with us, we may collect:
- Name, business name, title, email, phone, billing address, and tax identifiers where required.
- Account credentials and authentication logs for workspace or portal access.
- Pickup and delivery addresses, delivery instructions, and recipient contact details you provide.
- Shipment descriptions, reference numbers, declared value, and special handling notes.
- Payment and invoicing information (processed through our payment service providers).
- Communications with dispatch, support, and account management.
Recipients and consignees
To complete delivery we may collect or receive:
- Name, phone, email, and delivery address.
- Proof-of-delivery data: photos, signatures, timestamps, GPS coordinates at delivery, and scan events.
- Delivery preferences and access instructions left by the sender or recipient.
Driver and contractor applicants
If you apply to drive or contract with us, we may collect:
- Identity and contact information, résumé, and work history.
- Driver’s licence, vehicle registration, insurance, and compliance documents you upload.
- Background-check and screening results where permitted and with your consent.
- Banking or payment details for remittance, where applicable.
- Performance, safety, and route completion records during engagement.
Website and app visitors
When you browse our site or use our tools, we may automatically collect:
- IP address, browser type, device identifiers, operating system, and referring URLs.
- Pages viewed, session duration, and interaction events (subject to cookie preferences).
- Approximate location derived from IP or device settings where maps or tracking features are used.
- Cookie and local-storage preferences (see our Cookie Policy).
How we collect information
We collect personal information:
- Directly from you — forms, quotes, contracts, email, phone, chat, and document uploads.
- From shippers about recipients — when a customer provides recipient details for delivery.
- Automatically — through cookies, logs, and similar technologies on our website and apps.
- From service providers — such as background-check vendors, payment processors, or mapping platforms acting on our instructions.
- From publicly available or licensed sources — where relevant to verify business information or addresses.
Purposes and legal bases for use
We use personal information only for purposes a reasonable person would consider appropriate in the circumstances, including:
- Providing courier, last-mile delivery, tracking, dispatch, and proof-of-delivery services.
- Quoting, contracting, invoicing, collecting payment, and managing B2B accounts.
- Communicating service updates, ETAs, delivery confirmations, and support responses.
- Verifying identity, preventing fraud, and protecting the security of our systems and personnel.
- Screening and managing driver and contractor applicants and engagements.
- Complying with legal, regulatory, tax, employment, and transportation obligations.
- Improving our operations, routes, website, and customer experience through aggregated analytics.
- Enforcing our terms, acceptable-use rules, and resolving disputes.
Commercial electronic messages (CASL)
We may send commercial electronic messages (CEMs) about our services where permitted under Canada’s Anti-Spam Legislation (CASL), including with express or implied consent or where an exemption applies.
Service-related messages (for example, delivery status or account security) are not marketing messages. Marketing emails include an unsubscribe mechanism. To opt out of marketing, use the unsubscribe link or contact us at the address above.
Disclosure and sharing
We do not sell or rent personal information. We may disclose personal information to:
- Service providers and processors — hosting (e.g., Cloudflare), email, SMS, maps, payment, analytics (if accepted), background checks, and IT support — bound by contractual confidentiality and data-protection terms.
- Business partners and 3PLs — when you or your organization instruct us to deliver on behalf of a partner program.
- Recipients and shippers — limited information necessary to complete delivery or resolve a service issue.
- Professional advisers — lawyers, accountants, and insurers under confidentiality duties.
- Law enforcement and regulators — when required by law, court order, or to protect safety, rights, or property.
- Successors — in connection with a merger, acquisition, or sale of assets, subject to this policy or notice to you.
Storage and cross-border processing
Personal information may be stored or processed in Canada and in other jurisdictions where our service providers operate (including the United States). When information is processed outside Canada, it may be subject to the laws of that jurisdiction and accessible to courts, law enforcement, and national security authorities there.
We assess cross-border transfers and use contractual and organizational measures designed to protect personal information in line with Canadian requirements.
Retention
We retain personal information only as long as necessary for the purposes described in this policy and as required by law. Typical retention periods include:
- Shipment and proof-of-delivery records — generally up to seven (7) years for operational, tax, and claims purposes unless a longer period is required.
- Account and billing records — for the life of the account plus applicable statutory periods.
- Driver and contractor files — for the engagement period plus periods required for employment, safety, and tax law.
- Marketing consents and unsubscribe records — as required under CASL.
- Website logs — for a limited period for security and troubleshooting, then deleted or anonymized.
Security safeguards
We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit where supported, employee training, and vendor due diligence.
No method of transmission or storage is completely secure. You are responsible for safeguarding your account credentials and notifying us promptly of suspected unauthorized access.
Your rights (Canada — PIPEDA)
Subject to applicable law and exceptions, you may:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Withdraw consent to optional processing, where consent is the legal basis.
- Challenge our compliance with PIPEDA by contacting us first, then the Office of the Privacy Commissioner of Canada (OPC) if unresolved.
Quebec residents (Law 25)
If you are in Quebec, you may have additional rights including:
- The right to information about our privacy practices in clear language.
- The right to access, rectify, and delete personal information, subject to legal exceptions.
- The right to withdraw consent to the communication or use of personal information for certain purposes.
- The right to request cessation of dissemination or de-indexing in limited circumstances.
- The right to data portability for certain automated processing, where applicable.
Children
Our services and website are directed at businesses and adults. We do not knowingly collect personal information from children under 16 without appropriate parental or guardian consent. Contact us if you believe we have collected information from a child in error.
Automated decision-making
We may use automated systems for route optimization, ETA prediction, fraud detection, and operational analytics. These systems support human dispatchers and coordinators; they do not produce legal or similarly significant effects about you without human review where required by law.
Workspace mail and dispatch tools
Where we provide business mail, dispatch, or partner workspace tools, additional account terms may apply. Mail content, metadata, and authentication logs may be processed to provide the service, secure accounts, and comply with law. Workspace administrators may access account information within their organization as permitted by their role.
Proof of delivery and location data
Drivers and systems may capture GPS coordinates, timestamps, photos, and signatures at pickup and delivery. This information is used to confirm service completion, resolve disputes, improve routing, and meet customer SLAs. Location data is not used for unrelated advertising.
Third-party links
Our website may link to third-party sites (for example, booking calendars, app stores, or partner platforms). We are not responsible for their privacy practices. Review their policies before providing personal information.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” and “Effective date” at the top will change when we do. Material changes may be communicated by email, account notice, or a prominent website notice where appropriate.
Continued use of https://lastmile.express or our services after the effective date of an updated policy constitutes acceptance of the changes, except where further consent is required by law.
Contact and complaints
Privacy inquiries and access requests may be directed to our Privacy Officer at legal@lastmile.express (subject line: “Privacy request”) or by mail to UCHAAPKO INC, 190 Beebalm Cres, Nepean, ON, K2J 7G7, Attn: Privacy Officer.
Office of the Privacy Commissioner of Canada: www.priv.gc.ca. Commission d’accès à l’information du Québec (Quebec residents): www.cai.gouv.qc.ca.