This version does not contain provisions for the use of private data in the following circumstances.

Gift card purchases and recipient data disclosures
Loyalty program disclosures
Instructions for managing different types of communications

This version does not contain provisions regarding the following company policies and disclosures:

Comprehensive disclosure on company use of facial recognition and biometric data
Policy regarding detailed retention periods for different data types
Policy regarding company metrics on privacy rights requests
Policy regarding whether company will respond to “Do Not Track” signals

PKUP PRIVACY POLICY

Last Updated: Jan 13, 2026

1. DEFINITIONS AND INTERPRETATION 3

2. WHAT PERSONAL INFORMATION WE COLLECT 5

2.1 Information You Provide 5

2.2 Information We Collect Automatically 6

2.3 Information We Receive from Other Sources 6

2.4 Special Categories of Personal Information 7

2.5 Referral Program Information 7

2.6 Data Minimization and Purpose Limitation 8

3. HOW WE USE PERSONAL INFORMATION 8

3.1 To Provide Our Services 8

3.2 For Safety and Security 8

3.3 To Communicate with You 9

3.4 For Legal and Compliance Purposes 9

3.5 To Improve and Develop Our Services 9

3.6 For Marketing and Advertising 10

3.7 For Business Operations 10

3.8 With Your Consent 10

3.9 Automated Decision-Making and Profiling 10

3.10 Age Verification for Restricted Deliveries 11

4. HOW WE SHARE PERSONAL INFORMATION 11

4.1 With Other Users 12

4.2 With Service Providers 12

4.3 With Business Partners 12

4.4 For Legal Reasons 12

4.5 In Connection with Business Transfers 12

4.6 With Your Consent 13

4.7 For Custom Audience and Social Media Advertising 13

4.8 Aggregated or De-identified Information 13

4.9 Public Information 13

4.10 Emergency Situations 14

5. YOUR PRIVACY RIGHTS AND CHOICES 15

5.1 Access and Portability 15

5.2 Correction 15

5.3 Deletion 15

5.4 Withdrawal of Consent 15

5.5 Marketing Communications 15

5.6 Location Information 15

5.7 Cookies and Tracking Technologies 16

5.8 How to Exercise Your Rights 16

5.9 No Discrimination 16

5.10 Consent Management 16

6. COOKIES AND TRACKING TECHNOLOGIES 16

6.1 Technologies We Use 16

6.2 How We Use These Technologies 17

6.3 Your Choices 17

6.4 Do Not Track 18

6.5 Interest-Based Advertising 18

6.6 Your Advertising Choices 18

7. DATA RETENTION 19

7.1 Retention Periods. 19

7.2 Criteria for Retention 19

7.3 Deletion 19

8. SECURITY 19

8.1 Security Measures 19

8.2 Incident Response 20

8.3 Your Role in Security 20

9. CHILDREN'S PRIVACY 20

10. INTERNATIONAL DATA TRANSFERS 20

11. THIRD-PARTY SERVICES 21

12. CONTACT US 21

13. LANGUAGE 22

PLEASE READ THIS PRIVACY POLICY (THE "POLICY") CAREFULLY. THIS WEBSITE AND ITS SUBDOMAINS (COLLECTIVELY, THE "WEBSITE"), THE PKUP MOBILE APPLICATION ("MOBILE APP," AND TOGETHER WITH THE WEBSITE, THE "PLATFORM"), AND THE SERVICES AND RESOURCES AVAILABLE OR ENABLED VIA THE WEBSITE OR THE PLATFORM (COLLECTIVELY AND EACH INDIVIDUALLY, THE "SERVICES"), ARE CONTROLLED BY PKUP LOGISTIC SOLUTIONS LIMITED ("PKUP", "WE", "US" OR "OUR").

THIS POLICY DESCRIBES HOW WE COLLECT, USE, DISCLOSE, RETAIN, AND PROTECT PERSONAL INFORMATION WHEN YOU ACCESS OR USE THE PLATFORM OR SERVICES. BY CLICKING ON THE "I ACCEPT" BUTTON, COMPLETING THE REGISTRATION PROCESS, BROWSING THE WEBSITE, DOWNLOADING OR USING THE MOBILE APP, ORDERING OR RECEIVING ANY DELIVERY SERVICES, OR OTHERWISE ACCESSING OR USING ANY OF THE SERVICES, YOU REPRESENT THAT (1) YOU HAVE READ, UNDERSTAND, AND AGREE TO BE BOUND BY THIS POLICY, (2) YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED HEREIN, AND (3) YOU HAVE THE AUTHORITY TO ENTER INTO THIS POLICY PERSONALLY OR ON BEHALF OF THE LEGAL ENTITY ON WHOSE BEHALF YOU ARE ACCESSING THE SERVICES. THE TERM "YOU" REFERS TO THE INDIVIDUAL OR SUCH LEGAL ENTITY, AS APPLICABLE. IF YOU DO NOT AGREE TO BE BOUND BY THIS POLICY, YOU MAY NOT ACCESS OR USE ANY OF THE SERVICES.

PLEASE BE AWARE THAT SECTION 10 (INTERNATIONAL DATA TRANSFERS) OF THIS POLICY CONTAINS IMPORTANT INFORMATION ABOUT THE TRANSFER OF YOUR PERSONAL INFORMATION TO JURISDICTIONS OUTSIDE OF CANADA THAT MAY NOT PROVIDE THE SAME LEVEL OF PRIVACY PROTECTION AS YOUR HOME JURISDICTION.

PLEASE NOTE THAT THIS POLICY IS SUBJECT TO CHANGE BY PKUP IN ITS SOLE DISCRETION AT ANY TIME. When changes are made, PKUP will make a copy of the updated Policy available at the Website and in the Mobile App and update the "Last Updated Date" at the top of this Policy. If we make any material changes to the Policy, we will provide notice of such material changes on the Website or in the Mobile App and attempt to notify you by sending an e-mail to the e-mail address provided in your Account registration. Any changes to the Policy will be effective immediately for new users of the Services and will be effective for existing Registered Users upon the earlier of (a) thirty (30) days after the "Last Updated Date" at the top of this Policy, or (b) your consent to and acceptance of the updated Policy if PKUP provides a mechanism for your immediate acceptance in a specified manner (such as a click-through acceptance), which PKUP may require before further use of the Services is permitted. If you do not agree to the updated Policy, you must stop using all Services upon the Effective Date of the updated Policy. Otherwise, your continued use of any of the Services after the Effective Date of the updated Policy constitutes your acceptance of the updated Policy. PLEASE REGULARLY CHECK THE WEBSITE TO VIEW THE THEN-CURRENT POLICY.

DEFINITIONS AND INTERPRETATION

In this Policy, the following terms shall have the meanings set forth below:

"Account" means a registered account created by you to access and use the Platform and Services.

"Applicable Privacy Laws" means all applicable federal, provincial, territorial, and municipal laws, regulations, directives, and regulatory requirements relating to privacy and the protection of Personal Information, including without limitation the Personal Information Protection and Electronic Documents Act, SC 2000, c 5 ("PIPEDA"), the Personal Information Protection Act, SBC 2003, c 63 ("BC PIPA"), the Personal Information Protection Act, SA 2003, c P-6.5 ("Alberta PIPA"), An Act respecting the protection of personal information in the private sector, CQLR c P-39.1 ("Quebec Private Sector Act"), Canada's Anti-Spam Legislation, SC 2010, c 23 ("CASL"), and any other applicable privacy, data protection, or anti-spam legislation, each as amended from time to time.

"Business Partners" means third parties with whom PKUP has entered into agreements or arrangements for business purposes, including without limitation payment processors, identity verification providers, marketing partners, technology service providers, and other service providers or business partners.

"Communications Data" means all communications between you and PKUP or between users through the Platform, including without limitation messages, emails, phone calls, in-app communications, and any recordings thereof.

"Cookies" means small text files that are stored on your browser or device by websites, apps, online media, and advertisements.

"Customer" means any individual or entity that requests delivery services through the Platform.

"Delivery Professional" or "Courier" means any individual who provides delivery services through the Platform as an independent contractor.

"Device Information" means information about the device you use to access the Platform, including without limitation device type, operating system, unique device identifiers, mobile network information, and IP address.

"Location Data" means information about your geographic location, including without limitation GPS coordinates, IP address-based location, and location history.

"Personal Information" means any information about an identifiable individual, as such term is defined under Applicable Privacy Laws, but does not include aggregate, anonymous, or de-identified information that cannot reasonably be used to identify you.

"Recipient" means any individual who receives a delivery arranged through the Platform.

"Registered User" means a user who has registered an Account with PKUP through the Services.

"Services" has the meaning set forth in the preamble.

"Usage Data" means information about how you interact with the Platform, including without limitation pages viewed, features accessed, search queries, and session duration.

WHAT PERSONAL INFORMATION WE COLLECT

PKUP collects Personal Information when you interact with our Platform and Services. The types of Personal Information we collect depend on how you interact with us and which Services you use. We collect the following categories of Personal Information:

Information You Provide

The Information you provide to us includes:

Account Information. When you create or update your Account, we collect your name, email address, phone number, password (which we store in encrypted format), date of birth (which we use to verify your eligibility to use our Services and for age-restricted deliveries), profile picture (if you choose to upload one), preferred language, and any other information you choose to provide. If you register using a third-party service such as Facebook, Apple, or Google, we collect information from that service as permitted by your privacy settings on that service, which may include your name, email address, and profile picture.

Identity Verification Information. To verify your identity, prevent fraud, and comply with legal requirements, we may collect government-issued identification documents (such as driver's licenses or passports), which may include your photograph, identification number, date of birth, and other information contained in such documents. We may also collect photographs or selfies for identity verification purposes, and with your explicit consent where required by law, we may use facial recognition technology to verify your identity. For certain deliveries, we collect your signature or electronic signature.

Payment Information. We collect payment method information (such as credit or debit card details), billing name and address, and transaction history. Payment card information is processed by our third-party payment processors and we do not store complete payment card numbers in our systems. We maintain records of your transaction history for tax, accounting, and legal compliance purposes.

Delivery Information. For each delivery transaction, we collect pickup and delivery addresses, recipient name and contact information, package details (including size, weight, and contents description), special delivery instructions, delivery confirmation information (which may include photographs, signatures, or PIN codes), and the date and time of delivery request and completion.

Communications. We collect and maintain records of all communications you have with us or through our Platform, including customer service inquiries, feedback, ratings and reviews of Delivery Professionals or delivery services, complaints, dispute-related communications, survey responses, and any other communications you send to us or through our Platform. We may record phone calls for quality assurance and training purposes, where permitted by law and with appropriate notice.

Information We Collect Automatically

When you access or use our Platform, we automatically collect certain information, including:

Device Information. We collect information about the device you use to access our Platform, including hardware model, operating system and version, unique device identifiers, mobile network information, IP address, browser type and version, and other technical information about your device.

Location Data. When you use our Services, we collect precise location information from your mobile device if you have granted us permission to do so. We collect this information when the app is running in the foreground (app open and on-screen) and, if you enable this feature, when the app is running in the background (app open but not on-screen). We also collect approximate location information based on your IP address. Location information is essential for providing our delivery services, including matching Customers with nearby Delivery Professionals, providing accurate delivery estimates, enabling real-time delivery tracking, and verifying delivery completion.

Usage Data. We collect information about your interactions with our Platform, including the pages or features you access, the time and date of your visits, the time spent on pages, search queries, app crashes and error reports, and other usage patterns and preferences.

Cookie and Tracking Technology Data. We use cookies, web beacons, mobile analytics software, and similar tracking technologies to collect information about your use of our Platform. This includes information about your browsing behavior, referring and exit pages, and conversion information. For more information about our use of cookies and similar technologies, please see Section 6 below.

Information We Receive from Other Sources

We may receive Personal Information about you from other sources, including:

Social Media Services. If you create or log into your Account through a social media service, we will receive information from that service as permitted by your settings on that service and the service's privacy policy.

Other Users. We may receive information about you from other users, such as when a Customer provides delivery recipient information, when users submit ratings or feedback about you, or when safety incidents or complaints are reported.

Business Partners. We receive information from Business Partners who provide services to us, such as identity verification providers who help us verify your identity, background check providers (for Delivery Professionals), payment processors who help us process payments, and marketing partners who help us understand our users and improve our Services.

We receive information from Business Partners who provide services to us, including identity verification and background check providers. For Delivery Professionals, we work with third-party providers to verify identity using government-issued identification, conduct criminal background checks where permitted by law, verify driving records and license status, check for relevant safety-related information, and confirm work authorization status in Canada.

Background checks conducted on Delivery Professionals may include criminal record searches at local, provincial, and national levels, driving record abstracts from provincial motor vehicle authorities, identity verification against government databases, and sex offender registry checks where applicable and permitted by law. This information is used solely to determine eligibility to provide delivery services on our Platform, maintain platform safety and security, comply with our insurance requirements, and meet regulatory obligations.

Delivery Professionals have the right to be informed before a background check is conducted, know the scope and nature of the background check, receive a copy of any background check report upon request, and dispute inaccurate information in accordance with applicable law. All background check information is handled in strict confidence and retained only as long as necessary for safety, legal, and regulatory compliance purposes. We do not use background check information for any purpose other than those stated above.

Public Sources. We may collect information from publicly available sources to verify information you provide to us or for fraud prevention purposes.

Special Categories of Personal Information

In certain circumstances, we may collect special categories of Personal Information as defined under Applicable Privacy Laws. This may include:

Health Information. You may provide health-related information in delivery instructions, such as allergies or dietary restrictions. We collect this information only as necessary to fulfill your delivery request and share it only with the Delivery Professional and merchant as needed to complete your order.

Biometric Information. Where permitted by law and with your explicit consent, we may collect biometric information derived from photographs for identity verification purposes. This may include using facial recognition technology to compare a selfie you provide with the photo on your government-issued ID.

Precise Location Data. We collect precise GPS location data when you have enabled location services for our app. This sensitive location data is essential for providing our real-time delivery services.

We collect these special categories of Personal Information only with your explicit consent where required by law, and we use appropriate security measures to protect this sensitive information.

Referral Program Information

If you participate in our referral program, we collect additional information to administer the program. This includes your referral code and associated Account information, name and contact information of individuals you refer (including email address or phone number), and your preferred payment method for referral rewards.

When individuals you refer to our Services create an Account using your referral code, we collect confirmation that they used your referral code, their Account creation and first delivery completion status, and information necessary to calculate and distribute referral rewards.

Before sharing someone's contact information through our referral program, you represent and warrant that you have obtained their permission to do so. We will only use referred individuals' contact information to send a single invitation to try our Services, track referral program participation if they create an Account, and comply with legal obligations. We will not sell or use referral contact information for any purpose other than administering the referral program.

Referred individuals may opt out of future referral invitations by contacting us at privacy@pkup.ca. Participation in the referral program is subject to our Referral Program Terms and Conditions, which may include additional privacy-related provisions.

Data Minimization and Purpose Limitation

We are committed to collecting only the minimum amount of Personal Information necessary to provide our Services. We do not collect Personal Information for purposes that are incompatible with those identified in this Policy. When we identify opportunities to reduce the amount of Personal Information we collect or the length of time we retain it, we will implement such changes as part of our privacy-by-design approach.

We regularly review our data collection practices to ensure that we are not collecting excessive Personal Information. If we determine that certain Personal Information is no longer necessary for the purposes for which it was collected, we will securely delete or anonymize such information in accordance with our retention policies.

HOW WE USE PERSONAL INFORMATION

We use the Personal Information we collect for the following purposes:

To Provide Our Services

We use your Personal Information to provide, maintain, and improve our Services, including to create and manage your Account; process and facilitate delivery requests; match Customers with Delivery Professionals; calculate delivery fees and process payments; provide real-time tracking of deliveries; communicate with you about your deliveries; verify age for restricted deliveries; generate receipts and transaction records; personalize your experience on our Platform; and otherwise provide the Services you request.

For Safety and Security

We use Personal Information to maintain the safety, security, and integrity of our Platform and Services, including to verify user identities; detect, investigate, and prevent fraud and unauthorized access; monitor for safety incidents and inappropriate behavior; investigate complaints and disputes; enforce our Terms of Service and other policies; protect against malware and security threats; and protect the rights, property, and safety of PKUP, our users, and the public.

To Communicate with You

We use your Personal Information to communicate with you about our Services, including to send service-related announcements and updates; respond to your inquiries and provide customer support; send you technical notices, security alerts, and support messages; inform you about changes to our Services, policies, or terms; and with your consent, send you marketing communications about our Services, promotions, and offers.

For Legal and Compliance Purposes

We use Personal Information as necessary to comply with legal obligations and protect our legal interests, including to comply with applicable laws, regulations, and legal process; respond to lawful requests from law enforcement, courts, and regulatory authorities; establish, exercise, or defend legal claims; maintain records as required by law; meet tax, accounting, and financial reporting obligations; and conduct audits and compliance reviews.

To Improve and Develop Our Services

We use Personal Information for research, analysis, and development purposes to enhance our Services and create innovative features. Our research and development activities include analyzing delivery patterns to optimize routes and reduce delivery times, studying user behavior to improve app design and functionality, identifying common customer service issues to develop better solutions, and testing new features with select user groups before general release.

We employ machine learning and artificial intelligence technologies to enhance our Services, including training algorithms to improve delivery time predictions, developing models to better match Customers with Delivery Professionals, enhancing fraud detection capabilities, and improving address recognition and navigation accuracy. These technologies process Personal Information in accordance with privacy-by-design principles and appropriate safeguards.

Our market research activities involve understanding delivery trends in different neighborhoods, analyzing peak demand periods to ensure adequate service coverage, studying user preferences to develop new service offerings, and conducting surveys and user interviews to gather feedback. We may also engage in academic and industry research, including collaborating with universities on transportation and logistics research, participating in industry studies on gig economy trends, contributing anonymized and aggregated data to urban planning initiatives, and supporting research on sustainable delivery methods.

We pursue innovation projects focused on exploring new delivery technologies and methods, developing features for accessibility and inclusion, creating tools to reduce environmental impact, and testing integration with emerging technologies. All research and development activities employ appropriate safeguards, including data minimization techniques, anonymization and aggregation where possible, secure testing environments, and ethical review processes for research projects.

Participation in user research, surveys, focus groups, or beta testing programs is always voluntary. You may opt out of being contacted for research purposes by adjusting your preferences in your Account settings or by contacting us at privacy@pkup.ca. If you participate in research activities, we may provide additional information about how your data will be used for the specific research project.

For Marketing and Advertising

With your consent where required, we use Personal Information for marketing purposes, including to send you promotional communications about our Services; provide you with personalized offers and recommendations; conduct market research and surveys; measure the effectiveness of our marketing campaigns; and display targeted advertising.

For Business Operations

We use Personal Information for our internal business operations, including for business planning and analysis, financial reporting and forecasting, risk assessment and management, workforce planning and management, and other legitimate business purposes.

We may use your Personal Information for other purposes with your specific consent.

Automated Decision-Making and Profiling

We use automated processes and algorithms to enable essential parts of our Services and enhance your experience on our Platform. These automated processes help us provide efficient, safe, and reliable delivery services. Our primary automated processes include matching Customers with Delivery Professionals, calculating pricing, preventing fraud, and optimizing our Services.

When you request a delivery, our automated matching systems evaluate various factors to determine the best available Delivery Professional, including your location and delivery destination, proximity and availability of Delivery Professionals, current traffic conditions and estimated delivery times, vehicle capacity requirements based on package size, historical performance data and user ratings, and previous interactions between specific Customers and Delivery Professionals. The matching process is designed to minimize wait times while ensuring efficient service delivery.

We use automated pricing systems to calculate delivery fees based on distance between pickup and delivery locations, estimated time for delivery completion, current demand and supply conditions, package size and weight categories, time of day and day of week, weather conditions and seasonal factors, and applicable taxes and regulatory fees. Our pricing algorithms ensure fair and transparent pricing while maintaining service availability.

We employ machine learning models and automated processes for fraud prevention and security purposes. These systems detect and prevent fraudulent activities, identify suspicious account behavior or unauthorized access attempts, monitor for safety incidents or policy violations, verify user identities and payment methods, and flag potentially problematic delivery requests. These automated security measures are essential for maintaining the integrity and safety of our Platform.

We also use automated analysis for service optimization, including predicting delivery demand patterns, optimizing delivery routes, personalizing your experience based on past orders, recommending nearby Delivery Professionals, and estimating accurate delivery times. These optimizations improve service quality and user experience.

You have the right to request human review of any automated decision that significantly affects you. If you have concerns about an automated decision, please contact us using the information provided in Section 12 of this Policy.

Age Verification for Restricted Deliveries

For deliveries involving age-restricted items such as alcohol, cannabis, tobacco products, or certain medications, we implement additional verification procedures to ensure compliance with applicable laws and regulations. These procedures involve collecting and verifying government-issued photo identification to confirm that recipients meet minimum age requirements.

When you first order age-restricted items, we collect images of your government-issued photo identification (driver's license or passport), extract and verify your date of birth, verify the authenticity of the identification document, and record the time and location of age verification. For each delivery of age-restricted items, our Delivery Professionals must verify that the recipient's identification matches our records, the person is of legal age for the specific product, the recipient matches the identification presented, and the delivery address matches order requirements.

Age-restricted items cannot be left unattended and must be delivered directly to the person who placed the order or an authorized recipient of legal age. Delivery Professionals are required to refuse delivery if valid identification cannot be produced, the recipient appears intoxicated or impaired, the identification appears fraudulent or altered, or the recipient is not the intended person or authorized recipient.

We implement appropriate security measures for age verification data, including encrypting identification images during transmission and storage, limiting access to authorized personnel for verification purposes only, retaining identification data only as long as legally required, and prohibiting the use of identification information for marketing purposes. These measures ensure compliance with legal requirements while protecting the privacy and security of your identification documents.

You have the right to request information about our age verification process, access records of when your identification was verified, and request correction of any errors in age verification data. Failure to provide valid age verification will result in cancellation of the order for age-restricted items, and you may still be charged applicable cancellation fees as set forth in our Terms of Service.

We share Personal Information in the following circumstances:

With Other Users

We share certain information between users as necessary to facilitate deliveries:

With Delivery Professionals. When you request a delivery, we share your name, contact information, pickup and delivery addresses, delivery instructions, and real-time location (if you have enabled location sharing) with the Delivery Professional who accepts your delivery request. This information is necessary for the Delivery Professional to complete your delivery.

With Customers. When you accept a delivery request as a Delivery Professional, we share your name, photo, vehicle information, ratings, and real-time location with the Customer to enable them to track their delivery and communicate with you if necessary.

With Recipients. We share delivery status information and Delivery Professional details with the recipient of a delivery to enable them to track and receive their delivery.

With Service Providers

We share Personal Information with third-party service providers who perform services on our behalf, including companies that provide payment processing, cloud hosting and data storage, identity verification and background checks, fraud prevention and security services, customer support tools, analytics and data analysis, marketing and advertising services, and other services necessary for our operations. These service providers are contractually required to protect your Personal Information and use it only for the purposes we specify.

With Business Partners

We may share Personal Information with business partners, including companies with whom we partner to offer co-branded services, promotions, or loyalty programs; businesses that use our Services for their delivery needs; and other partners with whom we collaborate to provide or improve our Services. When we share Personal Information with business partners, we require them to protect your information and use it only for authorized purposes.

For Legal Reasons

We may disclose Personal Information when we believe it is necessary to comply with applicable law, regulation, legal process, or governmental request; enforce our Terms of Service and other agreements; protect the rights, property, or safety of PKUP, our users, or others; detect, prevent, or address fraud, security, or technical issues; or respond to emergencies where we believe physical safety is at risk.

In Connection with Business Transfers

If PKUP is involved in a merger, acquisition, asset sale, corporate reorganization, bankruptcy, or other business transaction, we may disclose Personal Information as part of that transaction. In such cases, we will require the recipient to protect your Personal Information consistent with this Policy.

We may share your Personal Information in other ways when you provide your explicit consent or direct us to do so.

We may share certain information with social media platforms and advertising partners to deliver targeted advertisements and measure their effectiveness. This practice, commonly known as "Custom Audience" advertising, involves sharing hashed or encrypted identifiers with platforms such as Facebook, Instagram, Google, and others.

The purposes of such sharing include showing you relevant PKUP advertisements when you use third-party services, excluding existing customers from certain promotional campaigns, finding similar audiences who may be interested in our Services, and measuring the effectiveness of our advertising campaigns. The information shared typically includes hashed email addresses, phone numbers, or device identifiers, which the platforms match against their user databases without revealing your identity to us.

When you interact with our social media pages or use social login features, the social media platform may share information with us as permitted by your privacy settings on that platform. We may receive your name, email address, profile picture, and friends list if permitted by your settings. Your interactions with our content on social media platforms may be visible to others on those platforms according to their privacy policies.

To opt out of Custom Audience advertising, you may contact us at privacy@pkup.ca to request that we exclude your information from custom audience creation. You may also adjust your advertising preferences directly on each social media platform through their privacy or advertising settings. Please note that opting out of custom audiences will not affect advertisements you see based on your activity on the social media platforms themselves, only those resulting from our sharing of information with those platforms.

Aggregated or De-identified Information

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for any purpose, including business development, research, marketing, and analytics.

Public Information

Certain information you provide through our Services may be visible to other users or the public. This includes ratings and written reviews you provide about Delivery Professionals, which may be visible to those Delivery Professionals and to other Customers considering using their services. When you submit a review, your first name and last initial may be displayed with your review. Any photos you upload of delivered items may be shared with merchants and other users as necessary for service-related purposes.

For Delivery Professionals, certain profile information is necessarily public to enable Customers to make informed decisions. This includes the Delivery Professional's first name, profile photo, vehicle information, aggregate rating, and general statistics about delivery history. During active deliveries, Customers can see their assigned Delivery Professional's real-time location if location sharing is enabled.

Customers' names and delivery addresses are visible to Delivery Professionals during active deliveries to enable successful completion of the service. This information is only accessible for the duration necessary to complete the delivery and for a limited time thereafter for customer service purposes.

We may publicly share aggregated statistics about deliveries, popular delivery areas, service trends, and other analytical information. This information is anonymized and aggregated in a manner that cannot be used to identify any individual user.

You may control what information becomes public by choosing not to upload photos or write reviews, using initials or a nickname in your Account settings where permitted, or contacting us at privacy@pkup.ca to request removal of content you have posted. However, please note that once information has been made public, we cannot control how others may use or share that information.

Emergency Situations

In emergency situations, we may share information with emergency services, law enforcement, or other relevant authorities to protect safety and respond to emergencies. This includes situations where we believe there is an imminent risk of death or serious physical injury to any person, when a user contacts emergency services through our Platform, or when we detect a serious safety incident during a delivery.

The information we may share in emergency situations includes user name and contact information, real-time location data if available, delivery details and route information, vehicle information for Delivery Professionals, and relevant communication records that may assist emergency responders. We may share this information without your consent when we believe in good faith that disclosure is necessary to protect the safety of any person.

Our Platform may include emergency features such as in-app emergency assistance buttons that connect directly to 911, automatic location sharing with emergency responders when emergency features are activated, and safety check-ins for deliveries in progress. Use of these features constitutes consent to share relevant information with emergency services.

You may manage certain emergency contact preferences in your Account settings. However, we reserve the right to share information with authorities regardless of your preferences if we believe it is necessary to prevent serious harm, respond to an emergency, or comply with legal obligations. Our emergency response procedures are designed to prioritize user safety while respecting privacy to the greatest extent possible under the circumstances.

YOUR PRIVACY RIGHTS AND CHOICES

Depending on your jurisdiction and subject to certain exceptions and limitations under Applicable Privacy Laws, you have certain rights regarding your Personal Information:

Access and Portability

You have the right to request access to the Personal Information we hold about you and to receive a copy of such information in a structured, commonly used, and machine-readable format. You may also request information about the categories of Personal Information we collect, the purposes for which we use it, and the categories of third parties with whom we share it.

Correction

You have the right to request that we correct or update any Personal Information that is inaccurate, incomplete, or outdated. You can update much of your information directly through your Account settings.

Deletion

You have the right to request deletion of your Personal Information, subject to certain exceptions. We may retain certain information as required by law, to complete transactions you initiated, for fraud prevention and security purposes, to enforce our agreements, or for other legitimate business purposes.

Where we process your Personal Information based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before withdrawal.

Marketing Communications

You can opt out of receiving marketing communications from us by clicking the "unsubscribe" link in our marketing emails, replying "STOP" to marketing text messages, adjusting your notification preferences in your Account settings, or contacting us using the information in Section 12. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related communications.

Location Information

You can prevent us from collecting precise location information by adjusting the permissions on your mobile device. Please note that disabling location services may affect your ability to use certain features of our Services, such as real-time delivery tracking.

Cookies and Tracking Technologies

You can manage your cookie preferences through your browser settings. For more information about controlling cookies and tracking technologies, please see Section 6.

How to Exercise Your Rights

To exercise any of these rights, you may:

Log into your Account and access the relevant settings or privacy controls; Email us at privacy@pkup.ca; Call us at [Phone Number]; or Write to us at the address provided in Section 12.

When you make a request, we may ask you to provide information to verify your identity. We will respond to your request within the time period required by Applicable Privacy Laws, typically within 30 days. If we need more time, we will inform you of the reason and extension period.

No Discrimination

We will not discriminate against you for exercising your privacy rights, including by denying you Services, charging different prices, or providing a different level of service.

We maintain comprehensive records of consent to demonstrate compliance with Applicable Privacy Laws. Our consent management practices include:

Consent Records. We record when and how consent was obtained, what you were told at the time consent was requested, whether consent was explicit or implied, any conditions or limitations on consent, and when consent was withdrawn (if applicable).

Granular Consent Options. Where appropriate, we provide granular consent options that allow you to consent to specific purposes or types of processing rather than all-or-nothing consent.

Consent Refresh. We periodically review and refresh consent for marketing communications and other optional processing activities to ensure that consent remains current and valid.

Withdrawal Mechanisms. We provide easy-to-use mechanisms for withdrawing consent, including in-app controls, unsubscribe links, and customer service channels. When you withdraw consent, we process your request promptly and update our records accordingly.

COOKIES AND TRACKING TECHNOLOGIES

Technologies We Use

We and our service providers use cookies and similar tracking technologies to collect information about your use of our Platform. These technologies include:

Cookies. Small data files placed on your browser or device that allow us to recognize your device and remember information about your visit.

Web Beacons. Small electronic images embedded in web pages and emails that allow us to count visitors and understand usage patterns.

Mobile SDKs. Software development kits integrated into our mobile apps that enable analytics and advertising functionality.

Local Storage. Technologies that allow us to store information locally on your device, similar to cookies but with enhanced capabilities.

Device Fingerprinting. Techniques to identify unique devices based on combinations of information such as operating system, browser version, and hardware configurations.

How We Use These Technologies

We use cookies and similar technologies for several purposes:

Essential Operations. To enable basic Platform functionality, maintain your session, remember your preferences, and ensure security.

Performance and Analytics. To understand how users interact with our Platform, identify technical issues, measure performance, and improve our Services.

Personalization. To remember your preferences, customize your experience, and provide relevant content and recommendations.

Advertising and Marketing. To deliver targeted advertising, measure ad effectiveness, and understand the success of marketing campaigns.

Your Choices

You have several options for managing cookies and tracking technologies:

Browser Settings. Most browsers allow you to block or delete cookies. Please note that blocking all cookies may affect Platform functionality.

Mobile Device Settings. Your mobile device may offer settings to limit ad tracking or reset advertising identifiers.

Third-Party Tools. You can opt out of interest-based advertising from participating companies through industry tools such as the Digital Advertising Alliance of Canada's opt-out page at youradchoices.ca.

Platform Controls. We provide controls within your Account settings to manage certain tracking preferences.

Do Not Track

Some browsers offer a "Do Not Track" setting. Our Platform does not currently respond to Do Not Track signals, but we provide other ways for you to manage tracking as described above.

Interest-Based Advertising

We and our advertising partners use cookies and similar technologies to deliver personalized advertising about our Services on our Platform and third-party websites and applications. Interest-based advertising, also known as targeted advertising or online behavioral advertising, uses information collected across multiple websites, apps, and other online services to predict your preferences and show you ads that are more relevant to you.

We may share certain information with advertising partners to display personalized ads about PKUP services on other platforms, measure the effectiveness of our advertising campaigns, understand how you interact with our ads, prevent showing you the same ad repeatedly, and provide aggregate reporting to advertisers. The information shared may include device identifiers, hashed email addresses, and usage data. We require our advertising partners to protect your information and use it only for authorized advertising purposes.

Your Advertising Choices

You have several options to control interest-based advertising. You may visit the Digital Advertising Alliance of Canada (DAAC) at youradchoices.ca/choices to opt out of interest-based advertising from participating companies. You may download the DAAC's AppChoices mobile app at youradchoices.ca/appchoices to manage mobile app advertising. Additional opt-out options are available through the Network Advertising Initiative at networkadvertising.org/choices.

For device-specific controls, iOS users may go to Settings > Privacy & Security > Tracking and turn off "Allow Apps to Request to Track." Android users may go to Settings > Privacy > Ads and enable "Opt out of Ads Personalization." We respect Global Privacy Control (GPC) signals where technically feasible. You may enable GPC in supported browsers to automatically communicate your opt-out preference.

Within your PKUP Account, you may log in and navigate to Privacy Settings > Advertising Preferences to manage personalized advertising from PKUP. Toggle "Personalized Ads" off to opt out of PKUP's interest-based advertising. For email marketing, you may click "Unsubscribe" in any marketing email, reply "STOP" to marketing SMS messages, or manage preferences in your Account notification settings.

Please note that opting out of interest-based advertising does not mean you will stop seeing ads from us. You will continue to see generic ads that are not based on your specific interests or activities. Your opt-out preferences are specific to each device and browser, so you must repeat this process on each device and browser you use.

DATA RETENTION

Retention Periods.

We retain Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Our typical retention periods are:

Account Information. We retain your Account information for the life of your Account plus seven years after Account closure to comply with tax and legal requirements.

Transaction Records. We retain transaction records for seven years to meet tax, accounting, and legal obligations.

Location Data. We retain precise location data for 90 days after a delivery is completed for customer service, safety, and analytical purposes.

Communications. We retain customer service communications for two years or as required for legal purposes.

Marketing Preferences. We retain your marketing preferences until you change them or withdraw consent.

Criteria for Retention

We determine appropriate retention periods based on the amount, nature, and sensitivity of the Personal Information; the purposes for which we process it; applicable legal requirements; and our legitimate business needs.

Deletion

When Personal Information is no longer needed for the purposes outlined in this Policy or required by law, we securely delete or anonymize it. Upon Account deletion, we will delete your Personal Information within a reasonable time period, except as necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

SECURITY

Security Measures

We implement appropriate technical and organizational measures designed to protect Personal Information against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include:

Technical Safeguards. We use encryption to protect data in transit and at rest, maintain firewalls and intrusion detection systems, implement access controls and authentication mechanisms, conduct regular security assessments and penetration testing, and maintain secure coding practices.

Organizational Safeguards. We conduct employee background checks and require confidentiality agreements, provide regular privacy and security training, implement role-based access controls, maintain comprehensive security policies and procedures, and conduct vendor due diligence.

Physical Safeguards. We restrict physical access to facilities where Personal Information is processed, maintain environmental controls in data centers, and implement secure disposal procedures for hardware and documents.

Incident Response

Despite our security measures, no method of transmission over the internet or electronic storage is completely secure. In the event of a Personal Information breach that creates a real risk of significant harm, we will notify affected individuals and regulatory authorities as required by Applicable Privacy Laws.

Your Role in Security

You play an important role in maintaining security by using strong, unique passwords; keeping your Account credentials confidential; logging out of your Account when finished; keeping your devices and apps updated; and promptly notifying us of any suspected unauthorized access to your Account.

CHILDREN'S PRIVACY

The Platform and Services are not intended for use by children under the age of 18. We do not knowingly collect Personal Information from children. If we become aware that we have collected Personal Information from a child without appropriate consent, we will take steps to delete that information. If you believe we have collected Personal Information from a child, please contact us immediately using the information in Section 12.

INTERNATIONAL DATA TRANSFERS

Your Personal Information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

Specifically, our servers and those of our service providers may be located in the United States and other countries outside of Canada. This means that when we collect your Personal Information, it may be processed in any of these countries. While your Personal Information is outside of Canada, it is subject to the laws of the country in which it is held and may be subject to disclosure to the governments, courts, law enforcement, or regulatory agencies of such country pursuant to the laws of such country.

We take appropriate safeguards to require that your Personal Information remains protected in accordance with this Policy when transferred internationally. These safeguards include implementing appropriate contractual clauses with our service providers and Business Partners.

By using our Services, you acknowledge and consent to the transfer, storage, and processing of your Personal Information in countries outside of your country of residence as described in this Policy.

THIRD-PARTY SERVICES

Our Platform may contain links to third-party websites, applications, or services that are not owned or controlled by PKUP. This Policy applies only to Personal Information collected by PKUP. We are not responsible for the privacy practices of third parties, and we recommend that you review the privacy policies of any third-party services you access through or in connection with our Platform.

If you choose to connect your Account with third-party services (such as social media accounts), you authorize us to access and use certain information from those services as permitted by your settings and their privacy policies. You can manage these connections through your Account settings.

CONTACT US

If you have questions, concerns, or complaints about this Policy or our privacy practices, or if you would like to exercise your privacy rights, please contact us at:

Privacy Officer PKUP Logistic Solutions Limited [ADDRESS] Email: privacy@pkup.ca Phone: [PHONE NUMBER]

We will investigate and attempt to resolve complaints and disputes regarding our use or disclosure of Personal Information in accordance with this Policy and Applicable Privacy Laws.

If you are not satisfied with our response, you have the right to contact the applicable privacy regulator:

For Federal privacy matters: Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, Quebec K1A 1H3 Toll-free: 1-800-282-1376 Website: www.priv.gc.ca

For British Columbia privacy matters: Office of the Information and Privacy Commissioner for British Columbia PO Box 9038 Stn Prov Govt Victoria, BC V8W 9A4 Phone: 250-387-5629 Toll-free in BC: 1-800-663-7867 Website: www.oipc.bc.ca

LANGUAGE

This Policy has been drafted in the English language. If this Policy is translated into any other language, the English language version shall prevail in the event of any inconsistency. The parties confirm that they have requested that this Policy be drafted in English. Les parties aux présentes confirment qu'elles ont exigé que la présente politique soit rédigée en anglais.

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED HEREIN.