ez enRoute Privacy Policy

Last Updated: August 4, 2025

ez enRoute Ltd. ("we," "us," or "our") operates the ez enRoute Platform, including web and mobile applications, to provide student transportation services. We are committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information, including student and parent/guardian data (e.g., addresses, transportation schedules) obtained from schools, school districts, bus operators, software providers, or other authorized sources.

By using our Service, you consent to the collection and use of information in accordance with this policy. Terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, unless otherwise defined. This policy applies to all users worldwide, including parents and drivers, who use our apps to track buses or inquire about student status.

1. Information Shared and Stored

The school district, school or school bus operator shares personal information necessary to provide safe and efficient transportation services, including:

• Student Information: Names, Student ID, Picture, Addresses, Grade Levels, Important Notes, and Transportation Schedules provided by schools or school districts, where applicable.
• Parent/Guardian Information: Names, contact information (e.g., phone numbers, email addresses).
• Usage Data: Information about how our services or software (e.g., bus tracking apps) are used, including logins, device information (e.g., IP addresses, browser types, device IDs), messages, and, where applicable, location data.
• Third-Party Data: Data received from schools, educational software platforms, or other authorized providers, such as student IDs and route assignments.

We collect only the information necessary for our services and ensure compliance with applicable privacy laws.

2. How We Gather Information

Information is shared through the following methods:

• Schools, School Districts, and School Bus Operators: Agreements with educational institutions to receive student data for transportation purposes, with appropriate authorization.
• Software Platforms: Integration with school management systems or third-party software for e.g. routing platforms, providing student and scheduling data, per data-sharing agreements.
• Direct Interactions: Information provided by parents/guardians through forms, apps, or customer service interactions, with the approval of authorized school or school districts.
• Automated Technologies: Cookies, analytics tools, or device data collected when users interact with our websites or mobile apps, with notice and consent where applicable. Users can manage cookie preferences through our website cookie settings or their browser settings. For location data used in bus tracking, users can disable it via app settings.

3. How We Use Information

We use personal information for the following purposes:

• Plan and manage student transportation routes and schedules.
• Communicate with parents/guardians about transportation updates or emergencies.
• Provide bus tracking or notifications via apps or other tools.
• Comply with legal obligations, such as education or transportation regulations.
• Improve our services through analytics, ensuring data is aggregated or anonymized where possible.
• Provide customer care and support.
• Monitor the usage of the Service.
• Detect, prevent, and address technical issues.

4. How We Share Information

We may disclose personal information in the following circumstances:

• Schools, School Districts, and School Bus Operators: To coordinate transportation services or verify student information, as authorized by our agreements.
• Service Providers: Third-party vendors (e.g., cloud storage providers, analytics services, or transportation logistics platforms) who assist in delivering our services, bound by contractual obligations to protect personal information.
• Legal Authorities: When required by law, such as in response to a court order or to comply with safety regulations.
• Emergency Services: To protect the health or safety of students in emergencies, sharing limited data (e.g., student name, location, or emergency contact information) as permitted by law.

We do not sell, rent, or trade personal information to third parties. Any disclosure is limited to what is necessary and compliant with applicable laws.

5. Data Security

We implement reasonable safeguards to protect personal information, including:

• Encryption of data during transmission and storage.
• Access controls to restrict data access to authorized personnel only.
• Application-level security mechanisms.
• Regular security assessments and updates to our systems.

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to meet legal and contractual obligations. Below are the retention periods for different types of data:

• Student Information (e.g., names, IDs, pictures, addresses, schedules): Deleted within one year after a student is no longer enrolled in a school using our services, unless a longer period is required by law.
• Parent/Guardian Information (e.g., names, contact details): Deleted within two years after a student is no longer enrolled or one year after the termination of our contract with the relevant school or district, whichever is longer.
• Usage Data (e.g., app login records, location data, device information): Retained for up to one year for analytics and service improvement, unless anonymized for statistical purposes.

After the retention period, personal information is securely deleted, unless archiving is required for legal compliance (e.g., educational record-keeping laws). In the event of a data breach, we may retain affected data longer for legal investigations, with appropriate safeguards.

Parents/guardians may request deletion of their or their child’s personal information by contacting support@ezenroute.com. We will process deletion requests within 30 days, subject to legal or contractual obligations, and confirm completion unless prohibited by law. Retention periods may be extended based on data-sharing agreements with schools or districts, which align with educational regulations.

For specific retention periods or details on school agreements, contact support@ezenroute.com or your school/district.

7. Your Rights and Choices

Depending on applicable laws, you may have the following rights regarding your or your child’s personal information:

• Access: Request access to the personal information we hold.
• Correction: Request correction of inaccurate or incomplete information through schools or school districts.
• Withdrawal of Consent: Withdraw consent for certain uses or disclosures of personal information, where applicable, by contacting support@ezenroute.com or through the app’s privacy settings.
• Deletion: Request deletion of personal information, subject to legal or contractual obligations.
• To exercise these rights, contact us at support@ezenroute.com. Parents/guardians may also contact their school or school district to manage student data shared with us.

8. Children’s Privacy

We store personal information about children for transportation purposes shared by schools, school districts and school bus operators. We comply with applicable privacy laws regarding children’s data, ensuring that consent is obtained from parents/guardians or schools where required. Parents/guardians may contact us at support@ezenroute.com to review or request deletion of their child’s information, subject to legal obligations.

9. Third-Party Links and Services

Our websites or apps may link to third-party services (e.g., school portals). We are not responsible for the privacy practices of these external services. Please review their privacy policies before providing information.

10. Transfer of Data

If personal information is transferred outside your jurisdiction (e.g., for cloud storage), we ensure it is protected by safeguards comparable to those required under applicable privacy laws, such as Standard Contractual Clauses or equivalent agreements with service providers. We notify individuals if their data is stored or processed outside their jurisdiction. Data will not be shared with any third party or vendors other than organizations with whom drivers, parents, users, or others associated with the Service interact. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

ez enRoute Ltd. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

11. Data Breach Notification

In the event of a data breach that may compromise personal information, we will notify affected users and relevant authorities within 72 hours, as required by applicable laws, via email, app notifications, or a prominent notice on our website. We will provide details about the breach, its potential impact, and steps users can take to protect their information.

12. Complaint Resolution Process

If you have concerns about our data practices, please contact our Privacy Officer at support@ezenroute.com. We aim to respond within 30 days and work to resolve your issue. If you are unsatisfied with our response, you may contact your local privacy authority for further assistance.

13. Handling of Biometric Data

Student pictures, provided by schools or school districts with parental consent or school authorization are used solely for manual identification purposes by authorized personnel, such as bus drivers verifying student identity during transportation. Pictures are not processed for biometric identification (e.g., facial recognition) and are not considered biometric data.

Pictures are encrypted during transmission and storage, accessible only to authorized personnel via secure systems, and subject to regular security assessments. They are not shared with third parties except as necessary for service delivery (e.g., secure cloud storage providers), who are bound by strict data protection agreements. Pictures are retained for one year after a student is no longer enrolled, or as required by school agreements or laws, after which they are securely deleted. Parents/guardians may review, correct, or request deletion of their child’s picture by contacting support@ezenroute.com or their school, with requests processed within 30 days, subject to legal or contractual obligations.

14. Changes to This Privacy Policy

e may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes (e.g., changes to data collection, use, or sharing practices) via email, app notifications, or a prominent notice on our website at least 30 days before changes take effect. The Last Updated date at the top indicates when changes were made.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer at:

ez enRoute Ltd.
Address: Unit 127, 9650 – 20 Avenue N.W., Edmonton, Alberta, T6R0R2
Email: support@ezenroute.com

You may also contact the relevant privacy authority in your jurisdiction for complaints.

By using our services, you acknowledge that you have read and understand this Privacy Policy and consent to the collection, use, and disclosure of personal information as described herein, subject to applicable laws.