Privacy Policy

1. Who we are

PartsBridge is a Canadian industrial-parts brokerage operating as a registered sole proprietorship in New Brunswick, Canada. In this policy, "PartsBridge," "we," "us," and "our" refer to this business. Our registered address is 236 St. George Street, Moncton, New Brunswick, E1C 1W1, Canada. Our GST/HST business number is 72389 1438 RT0001.

We operate an industrial parts sourcing and brokerage service through the website partsbridge.ca and related interfaces (together, the "Service"). This Privacy Policy describes what personal information we collect when you use the Service, why we collect it, and your rights in respect of that information.

2. Information we collect

2.1 Information you provide to us

When you request a quote, place an order, or contact us, we collect information you give us directly. This typically includes:

• Contact details: name, business email address, phone number, and company name
• Billing and shipping details: shipping name, street address, city, province, and postal code
• Part-request details: part numbers, descriptions, quantities, urgency, delivery preferences, and any notes or attachments you provide
• Communications: the content of emails, chat messages, and support inquiries you send us

2.2 Payment information

Payments on the Service are processed by Stripe Payments Canada, Ltd. We do not collect, see, or store your full credit card number, card verification value (CVV), or bank account credentials. Stripe collects this information directly from you under its own privacy policy (stripe.com/en-ca/privacy). We receive only a confirmation token, the last four digits of the card, the card brand, and transaction metadata.

2.3 Information collected automatically

When you browse the Service, we and our service providers may automatically collect limited technical information, including your IP address, browser type, device type, operating system, referring URL, pages viewed, and timestamps. This information is used for security, fraud prevention, service performance, and aggregate analytics.

3. How we use your information

We use your personal information for the following purposes:

• To source and deliver parts. We share your part request with supplier partners so they can confirm availability and fulfill your order.
• To prepare and send quotes. We generate CAD-priced quotes with applicable provincial taxes and deliver them to the email address you provided.
• To process payments and issue invoices. We use Stripe to collect payment and we issue invoices that include the information required under Canadian tax law.
• To arrange shipping. We provide shipping addresses to carriers and drop-ship suppliers so that parts reach you.
• To provide customer service. We respond to inquiries, handle returns, and manage disputes.
• To comply with legal obligations. We retain transaction records to meet tax, accounting, and consumer-protection requirements.
• With your consent, to send you marketing. See Section 10 below.

We rely on your consent (either express, such as when you submit a quote request, or implied, such as when you make a purchase) as our lawful basis for processing personal information, consistent with PIPEDA.

4. When we share information

We do not sell your personal information. We share it only with the following categories of recipients, and only to the extent reasonably necessary:

• Supplier partners. To fulfill your order, we share your shipping address, contact details, and part request with the supplier(s) we source from. Some suppliers drop-ship directly to you.
• Payment processor. Stripe, to process your payment.
• Shipping carriers. Canada Post, Purolator, FedEx, UPS, or other carriers that deliver your order.
• Email, hosting, and software providers. For example, Google Workspace (email), Railway (application hosting), and other infrastructure providers whose services we use to run PartsBridge.
• Professional advisers. Accountants, tax preparers, or lawyers when reasonably required.
• Authorities. Where we are legally required to disclose information (for example, in response to a valid court order or tax audit).

We contractually require our service providers to safeguard personal information consistent with this policy.

5. International data transfers

Some of our service providers (for example, Stripe and certain hosting and email providers) may store or process personal information in the United States or other jurisdictions. When that happens, your information may be subject to the laws of those jurisdictions, which may differ from Canadian privacy law. We take reasonable steps to ensure any such provider offers a level of protection comparable to PIPEDA.

6. How long we keep information

We retain personal information only for as long as needed for the purposes described in this policy, or as required by law. In general:

• Quote requests that do not convert to orders are retained for up to 24 months for follow-up and analytics.
• Order, invoice, and tax records are retained for at least six (6) years as required by the Canada Revenue Agency.
• Marketing contact records are retained until you withdraw consent, plus a short period thereafter to honour the withdrawal.

7. Your rights under PIPEDA

Canadian privacy law gives you the following rights in respect of your personal information:

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may ask us to correct information you believe is inaccurate or incomplete.
• Withdrawal of consent. You may withdraw consent to our processing at any time, subject to legal or contractual restrictions. Withdrawing consent may mean we can no longer provide some services.
• Complaint. You may file a complaint with our Privacy Officer (see Section 13). If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We will respond to verified requests within 30 days. We may ask you to confirm your identity before responding.

8. Security

We use reasonable physical, technical, and administrative safeguards to protect your personal information — including encrypted connections (TLS), access controls, and vetted third-party processors such as Stripe. No method of electronic storage or transmission is 100% secure, however, and we cannot guarantee absolute security. If a data breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner in accordance with PIPEDA.

9. Cookies and analytics

We use a small number of essential cookies to operate the Service (for example, to maintain your quote session). We may also use privacy-respecting analytics to understand aggregate traffic patterns. You can block or delete cookies through your browser settings; doing so may affect some features of the Service.

10. Marketing communications & CASL

If you send us a quote request, place an order, or subscribe to our list, we may occasionally send you commercial electronic messages about PartsBridge services, new supplier coverage, or account updates. These messages comply with Canada's Anti-Spam Legislation (CASL): they identify the sender, include our physical mailing address (236 St. George Street, Moncton, New Brunswick, E1C 1W1), and include a working unsubscribe link. You may unsubscribe at any time.

11. Children

PartsBridge is a business-to-business service and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post a revised version on this page and update the "Last updated" date at the top. We encourage you to review this page periodically.

13. Contact our Privacy Officer

To exercise any of your rights, ask a question about this policy, or file a complaint, please contact our Privacy Officer: