Privacy Policy

1. Introduction

Planet Motors Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website planetmotors.ca, use our mobile application, or engage with our services.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy laws.

2. Information We Collect

Personal Information

• Name, email address, phone number, and mailing address
• Driver's license information for test drives and purchases
• Financial information for financing applications (processed securely through our lending partners)
• Vehicle trade-in information including VIN, registration details
• Payment information (credit card, bank account details)

Automatically Collected Information

• IP address, browser type, device information
• Pages visited, time spent on pages, click patterns
• Referral sources and search queries
• Location data (with your consent)

3. How We Use Your Information

• Process vehicle purchases, trade-ins, and financing applications
• Provide customer support and respond to inquiries
• Send transactional emails (order confirmations, delivery updates)
• Send marketing communications (with your opt-in consent)
• Improve our website, services, and user experience
• Comply with legal obligations and OMVIC requirements
• Detect and prevent fraud

4. Information Sharing

We may share your information with:

• Financing Partners: Major banks, credit unions, and specialized auto finance lenders (for credit applications)
• Vehicle History Providers: Carfax Canada, Canadian Black Book
• Delivery Partners: Licensed auto transport companies
• Service Providers: Payment processors, email services, analytics providers
• Legal Requirements: When required by law or to protect our rights

We never sell your personal information to third parties for marketing purposes.

5. Financial Data & Payment Security

We take the protection of your financial information seriously. Here is how we handle sensitive payment and credit data:

Credit Card & Payment Processing

• All payment transactions are processed through Stripe, a PCI DSS Level 1 certified payment processor — the highest level of certification in the payment industry.
• Planet Motors never stores your full credit card number, CVV, or expiration date on our servers. This data is handled entirely by Stripe's secure infrastructure.
• Payment forms use Stripe's embedded checkout, which means card details are entered directly into Stripe's PCI-compliant iframe and never pass through our application servers.

Financing Application Data

• Financial information submitted through our financing application (income, employment details, SIN when required by lenders) is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Financing data is shared only with our pre-approved lending partners for the purpose of credit adjudication, and only after you submit your application.
• Government-issued identification documents uploaded for verification are stored in private, access-controlled cloud storage and automatically deleted after 90 days or upon deal completion.

General Security Measures

• 256-bit SSL/TLS encryption for all data transmission
• Regular security audits and penetration testing
• Role-based access controls and employee security training
• Data stored in SOC 2 Type II certified data centers in Canada
• Automated error monitoring with PII redaction (sensitive data is stripped from error logs)

6. Your Rights

Under PIPEDA, you have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Withdraw consent for marketing communications
• Request deletion of your data (subject to legal retention requirements)
• File a complaint with the Privacy Commissioner of Canada

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings. We use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Enable personalized advertising (with consent)

8. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Vehicle purchase records are retained for 7 years as required by OMVIC and tax regulations. You may request deletion of marketing data at any time.

9. Contact Us

For privacy-related inquiries or to exercise your rights, contact our Privacy Officer: