Legal

Privacy
Policy

Effective
October 6, 2026
Version
2026-10
Applies in
Alberta, Canada

This Privacy Policy explains how StreetDrop (“StreetDrop”, “we”, “us” or “our”) collects, uses, discloses and protects personal information. It covers our website streetdrop.ca, our quote and booking tools, the site chat, the client portal, live campaign tracking, QR codes printed on our hangers, the StreetDrop mobile app, and our hiring.

We follow Alberta's Personal Information Protection Act(PIPA) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act(PIPEDA) and Canada's Anti-Spam Legislation (CASL).

StreetDrop is a door hanger advertising and marketing business based in Calgary, Alberta. We are responsible for the personal information under our control, including information we pass to service providers to process for us.

We have designated a Privacy Officer who is accountable for our compliance with this policy and with privacy law. You can reach the Privacy Officer at info@streetdrop.ca, with “Privacy” in the subject line.

We handle personal information about five groups of people:

  • Clients and prospects: businesses and their staff who ask for a quote, book a campaign, use the portal or talk to us.
  • Website visitors: anyone who browses our site or uses the chat.
  • Residents: people living in the areas where we deliver, and people who scan a QR code on a hanger.
  • Couriers and staff: people who work for us, including through the StreetDrop app.
  • Job applicants: people who apply to work with us.
Contact and business details
ExamplesName, business name, email, phone, business address, industry.
Where it comes fromYou, through forms, chat, email, phone and agreements.
Campaign details
ExamplesZones, hanger size, dates, artwork, offers, uploaded files, instructions.
Where it comes fromYou, through the booking tools and the portal.
Signing records
ExamplesTyped legal name, drawn signature, date and time, IP address, browser details, and a fingerprint of the exact agreement text.
Where it comes fromRecorded when you sign an agreement online.
Payment information
ExamplesAmounts, invoices, payment status. Card numbers go directly to Stripe; we never see or store them.
Where it comes fromYou and Stripe.
Form drafts
ExamplesWhat you have typed into a quote, booking or inquiry form, saved as you go, even if you do not submit it, along with the IP address and browser details.
Where it comes fromYour browser, as you type.
Chat conversations
ExamplesYour messages, the page you were on, and your name and email if you choose to give them.
Where it comes fromYou, through the site chat.
Portal activity
ExamplesSign-in time, method, IP address and device, and requests you send through the portal.
Where it comes fromYour use of the portal.
Visit and device data
ExamplesPages viewed, referring site, ad click identifiers, campaign tags, approximate location from IP, browser and device type.
Where it comes fromOur servers, cookies, local storage and the tags in section 6.
QR scan data
ExamplesTime of scan, approximate city, the code scanned, the referring page, and one-way scrambled versions of the IP address and browser string.
Where it comes fromYour phone, when you scan a code on a hanger.
Delivery records
ExamplesCourier GPS tracks, street progress, timestamps and doorstep photos.
Where it comes fromOur couriers, through the StreetDrop app.
Courier and applicant information
ExamplesSee section 12.
Where it comes fromApplicants and couriers.

We do not knowingly collect sensitive information such as health, religious or political information from clients or visitors, and we ask you not to send it through the chat or forms.

We use personal information to:

  • answer questions, prepare quotes and help you finish a booking;
  • prepare, sign and keep records of agreements;
  • design, print, schedule and deliver your campaign, and prove that delivery happened;
  • run the portal and live tracking, and report results such as delivered doors and QR scans;
  • process payments, invoices and collections;
  • send service messages such as confirmations, start notices, progress updates, receipts and reminders;
  • measure and improve our website and advertising, and understand which ads bring customers;
  • keep our systems, couriers and clients secure, and detect fraud and misuse;
  • recruit, hire, pay and manage our staff; and
  • meet legal, tax, payroll and insurance obligations, and establish or defend legal claims.

We use personal information only for these purposes or for a purpose a reasonable person would consider appropriate in the circumstances. If we want to use it for a new purpose, we will tell you and, where required, ask for your consent first.

Our public pages use cookies, local storage and tags from the companies below. They help us understand how the site is used and measure whether our own advertising brings customers. When you contact us or book, a tag may report that a lead or booking happened, with its value, but we do not send your name, email or phone number to these companies.

Google Analytics and Google Ads
What it doesSite usage statistics, and measuring Google ad results. IP addresses are anonymized in Analytics.
Meta Pixel
What it doesMeasuring Facebook and Instagram ad results, and showing our ads to past visitors.
How to opt outMeta ad preferences
TikTok Pixel
What it doesMeasuring TikTok ad results, including completed paid bookings.
How to opt outTikTok app: Settings, Privacy, Ads
Microsoft Advertising
What it doesMeasuring Bing ad results.
How to opt outMicrosoft ad settings
Vercel Web Analytics
What it doesPrivacy-friendly page and performance statistics, without advertising cookies.
How to opt outNot needed: no cross-site tracking
6.1

Where they do not run

We do not load advertising or analytics tags in the client portal, on live tracking pages, on signing pages, on QR code redirects, or in our admin tools.

6.2

What we store in your browser

We use essential cookies to keep you signed in to the portal, and local storage to save your form drafts, theme choice, chat session and the ad or link that brought you to us. Clearing your browser's site data removes them.

6.3

Your choices

You can block or delete cookies in your browser, use a tracker-blocking browser or extension, use the opt-out links above, or opt out of interest-based ads from participating companies at youradchoices.ca. Blocking essential cookies will stop the portal from keeping you signed in.

The chat on our website is answered by an AI assistant, powered by Claude, a model provided by Anthropic. Your messages are sent to Anthropic to generate a reply and are stored in our systems so we can follow up and improve our answers. If you ask to speak to a person, the conversation and any contact details you give are emailed to our team.

Please do not share sensitive personal information, payment details or passwords in the chat. Replies from the assistant are general information and are not an offer or a binding quote.

Many hangers carry a QR code that passes briefly through streetdrop.ca before sending you to the advertiser's website. When you scan one, we record the time, the code, your approximate city and the referring page, and we store one-way scrambled (hashed) versions of your IP address and browser string, so we can count unique scans without keeping the originals. The scrambling key changes daily.

We use this to give the advertiser scan counts by day and hour. We do not give advertisers your IP address, device or any information that identifies you. Once you reach the advertiser's website, its own privacy policy applies, and we add campaign tags to the link so the advertiser can see the visit came from its hanger.

We plan routes from public address and map data. We do not collect, buy or keep the names of residents, and we do not build profiles of households.

While delivering, couriers record a GPS track and take doorstep photos to show the hanger was placed. Photos are taken to show the hanger, not people. The advertiser sees these records in its portal, and a few recent doorstep photos with the street name may appear on our website as examples of our work. If a photo shows you, your vehicle plate, your house number or anything else you want removed, email us and we will remove or blur it.

Do not want hangers?

Post a “no flyers” or “no junk mail” sign and our couriers will skip your door. Or email info@streetdrop.cawith “Do not deliver” in the subject and your street address, and we will add it to our do-not-deliver list. We keep only the address, and only to honour your request.

We share personal information only with service providers who process it for us under contract, and only as needed for the purposes in this policy:

Google Cloud and Firebase
PurposeDatabase, file storage, sign-in, maps
LocationUnited States and other countries
Vercel
PurposeWebsite hosting and performance statistics
LocationUnited States
Stripe
PurposeCard payments and invoicing
LocationCanada and United States
Resend
PurposeSending email, and recording whether it was delivered and opened
LocationUnited States
Anthropic
PurposeAI replies in the site chat
LocationUnited States
Google, Meta, Microsoft, TikTok
PurposeAdvertising measurement (section 6)
LocationUnited States and other countries
Print partners
PurposePrinting your hangers and materials
LocationCanada and United States

We also share information:

  • with the client whose campaign you work on or scan, as described in sections 8, 9 and 12;
  • with our professional advisers, such as accountants, lawyers and insurers, under a duty of confidentiality;
  • where the law requires or allows it,such as to comply with a court order, to collect a debt, to protect someone's safety, or to investigate fraud or a breach of an agreement; and
  • in a business transaction, if the StreetDrop business is incorporated, sold or merged, to the parties involved, who must use it only for the purposes in this policy.

We do not sell, rent or trade personal information.

Several of our service providers store or process personal information outside Canada, mainly in the United States. While it is there, it is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

You can ask our Privacy Officer, at info@streetdrop.ca, for more information about our policies and practices for service providers outside Canada, or any question about how they collect, use, disclose or store personal information for us.

12.1

Applicants

When you apply, we collect what you put in the application, such as your name, contact details, area, age range, transport, availability, work history, past supervisors and references, and any resume you upload. We use it to assess your application, contact you and contact references you give us. If you sign up for the app or a crew list, we collect your name, email and phone to contact you about work.

12.2

Couriers and staff

If you join us, we collect what we need to set up and manage the work relationship, including date of birth, home address, Social Insurance Number, banking details for pay, work eligibility documents, emergency contact and, for workers under 18, a parent or guardian's consent. These records are kept in restricted storage that only authorized administrators can open, and are used for payroll, tax, WCB, insurance and legal compliance.

12.3

During a shift

While you are on an active shift, the StreetDrop app records your location, the streets you complete and the photos you take, and keeps shift time records used for pay. Your first name and current position on the route are visible to the client whose campaign you are walking, on their tracking page, while the shift is active. We do not track you outside a shift.

This section covers the StreetDrop app for Android (package ca.streetdrop.app), distributed through Google Play, and applies together with the rest of this policy. The app is a work tool for our couriers and our business clients.

Precise and approximate location (couriers)
Why the app uses itRecords where deliveries happen, shows the courier their route and progress, and lets the client follow the campaign. Location is collected only while a shift is active, from the moment the courier taps Start Shift until the shift ends. During a shift it continues while the screen is off or another app is open, and Android shows a persistent notification the whole time. The app does not request “all the time” background location and collects nothing when no shift is running. Clients' locations are not collected.
Camera (couriers)
Why the app uses itTakes a proof-of-delivery photo when the courier chooses to. The app does not record video or audio.
Photo picker
Why the app uses itIf a courier uploads an existing photo, Android's photo picker shares only the one image chosen. The app has no access to the rest of the photo library.
Notifications
Why the app uses itShows the active-shift notification and sends work messages, such as a new route or a campaign update. You can turn them off in device settings.
Internet
Why the app uses itConnects the app to StreetDrop's servers.

The app also collects the courier's name and phone number, the client's business contact details, basic activity such as which routes were opened and when a delivery was marked complete, and crash and diagnostic data needed to keep it working. App data is stored on Google Firebase and Google Cloud. It is not sold, not shared for advertising, and not used to build advertising profiles.

13.1

Deleting your app account or data

Email info@streetdrop.ca from the address on your account, with “App data deletion request” in the subject, and tell us whether you want your whole account deleted or only some information. We will confirm and respond within 30 days. We delete your account and the personal information tied to it, except records the law requires us to keep, such as payroll and tax records and completed delivery records, and we will tell you what we keep and why.

13.2

Limiting collection

You can turn off location, camera or notifications in your device settings at any time. Without location or camera, a courier cannot complete route tracking or proof-of-delivery work in the app.

We use safeguards suited to the sensitivity of the information, including:

  • encrypted connections (HTTPS) for everything sent to and from our services;
  • encryption at rest provided by our cloud providers;
  • access limited by role, so staff see only what their job needs;
  • sign-in alerts on client portal accounts, and time-limited access links;
  • restricted storage for courier identity, tax and banking records; and
  • confidentiality obligations for our staff and service providers.

No system is perfectly secure. Keep your portal links and login codes private, and tell us at once if you think they have been exposed.

We keep personal information only as long as needed for the purpose it was collected for, or as long as the law requires, and then securely delete it or make it anonymous. In general:

Agreements, signing records, invoices and payments
How longAt least 7 years after the last transaction, for tax and legal purposes.
Campaign and delivery records, including photos and GPS tracks
How longFor the life of the client relationship and at least 7 years after, as service and billing records.
Unfinished form drafts and leads that never become clients
How longUp to 2 years, unless you ask us to delete them sooner.
Chat conversations
How longUp to 2 years, unless you ask us to delete them sooner.
Payroll, tax and employment records
How longAs long as the Canada Revenue Agency and Alberta employment law require, generally at least 6 years after the year they relate to.
Job applications that do not lead to hiring
How longUp to 2 years, so we can contact you about future openings, unless you ask us to delete them.
Do-not-deliver addresses
How longUntil you ask us to remove them.

If we use personal information to make a decision that directly affects you, we keep it for at least one year after that decision so you have a chance to ask for it.

Subject to limits set by law, you have the right to:

  • ask whether we hold personal information about you, and get a copy of it;
  • ask how it has been used and to whom it has been disclosed;
  • ask us to correct information that is wrong or incomplete;
  • withdraw your consent, as described in section 5; and
  • ask us to delete information we no longer need to keep.

Send your request to info@streetdrop.ca. We may ask you to confirm your identity before we act. We respond within 30 days, or tell you if we need more time as the law allows. Access is free unless a request is complex, in which case we will tell you any cost first.

If you are not satisfied with our answer, you may complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

We send service messages that relate to a quote, booking, campaign, account or job you have with us, such as confirmations, start notices, delivery updates, invoices, receipts and shift reminders. If you start a booking and leave it unfinished, we may send one reminder to help you complete it.

We send marketing messages only with your consent as CASL requires, and every marketing email includes a way to unsubscribe. You can also ask us to stop at any time by replying or emailing us, and we act on it within 10 business days.

Our client services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16, other than a parent or guardian's details given to us for a young worker.

We may hire couriers aged 16 and 17 where Alberta law allows. For them, we collect a parent or guardian's consent and contact details along with the information in section 12. If you believe a child has given us information, contact us and we will delete it.

If personal information under our control is lost or accessed without authorization, and there is a real risk of significant harm to anyone, we will notify the Information and Privacy Commissioner of Alberta and the people affected as PIPA requires, and keep a record of the incident.

We update this policy when our services or the law change. The version and effective date at the top show the latest revision. If we make a material change, we will post a notice on our website and, where we have your email and an active relationship, tell you by email.

Questions, requests or complaints about privacy can be sent to:

Privacy Officer

StreetDrop

Calgary, Alberta, Canada