We understand that letting companies use your personal information can feel worrying, especially when they don’t make it clear how they use your information. We strive to be as transparent as possible when working with you, and how we collect, use, and protect your personal information is no different. If you have any concerns or questions, please reach out to members@gomutual.co.
Our privacy policy will cover:
Always reach out if anything is unclear or you have any questions.
Personal information refers to any information that can be used to identify you, such as your name, address, phone number, email address, and other identifying details. Personal information is collected to verify you are who you say you are, and to contact you to provide our Services.
To provide you with our carsharing services, we require access to your driver’s license and insurance information, driving history, and, if applicable, vehicle information to ensure eligibility for our services.
We also collect demographic information such as your date of birth, as well as your preferences, to make sure you are eligible for our Services and to provide a personalized experience when using our Services.
Additionally, we collect financial information when you make a transaction with us, and we use third-party services such as Stripe to process payments. By using our Services, you authorize us to access and use your information to provide you with payment or accept payment for our Services.
Information we collect may include:
Any and all of your communication conducted in relation to Mutual’s Services (on Mutual’s platform or directly with Mutual employees through phone, text, email, etc.) may be recorded and saved.
We use your personal information to provide you with personalized and efficient Services. These may include:
You have the right to access and control your personal information. You can request access to your personal information and request that we update, delete, or correct any inaccuracies.
We may also obtain information about you from third parties such as identity verification services and credit bureaus where it is permitted by law. If you provide us with your social media information such as Facebook and Google, you allow us to access your information stored on these third parties.
We may share your personal information with third parties when required by law or to provide our Services to you. We only share information necessary for them to perform their function. Please reach out if you have any questions on our current third-party partners and our information security and privacy management practices.
We will never sell or rent your personal information without your explicit consent.
Mutual's website and application are built on Bubble.io, which prioritizes the security and protection of user data. Bubble implements industry best practices to ensure the security and privacy of the data within the application.
Here are the security measures and practices employed by Bubble to safeguard user data:
Bubble is built on Amazon Web Services (AWS), a robust cloud infrastructure that adheres to stringent security standards. AWS is compliant with certifications such as SOC 2, CSA, ISO 27001, and more. By leveraging the AWS infrastructure, Bubble benefits from the security measures and certifications provided by AWS.
To maintain a secure environment, Bubble employs automated code testing, vulnerability testing (including OWASP Top 10), and continuous monitoring technologies. These measures help identify and address any potential vulnerabilities or security weaknesses within the application.
Bubble apps provide the capability for point-in-time data recovery. This means that you can access previous versions of your data and restore it to a specific point in time if needed. This feature enhances data resilience and provides an additional layer of protection against data loss.
Bubble apps are equipped with comprehensive logs that capture and record various activities and events within the application. These logs enable app owners (Mutual) and administrators to review and monitor the actions performed by the application, even those that occur in the background. This promotes transparency and aids in detecting any unauthorized or suspicious activities.
Bubble utilizes AWS RDS's AES-256 encryption to encrypt data at rest. This encryption ensures that sensitive information stored within the application's databases remains protected and inaccessible to unauthorized individuals. AWS RDS employs robust encryption mechanisms to safeguard the confidentiality and integrity of the data.
Bubble provides user-defined privacy rules at the application level. This means that Mutual has control over the privacy settings and access permissions for their app's data. User-defined privacy rules empower us to define and enforce specific privacy measures to safeguard user data according to their requirements. This means only required information defined in this policy is made accessible to app users.
By leveraging Bubble's hosting platform, Mutual ensures that user data is securely stored and protected within the application. The combination of AWS infrastructure, vulnerability testing, data recovery capabilities, extensive logs, encryption, and user-defined privacy rules contributes to maintaining a secure and privacy-conscious environment for Mutual's users.
We take the security of your personal information as seriously as we protect our own information. We use various security measures to protect your information from unauthorized access, destruction, and alteration while it is under our control. However, it's important to note that no security system is completely foolproof and we cannot guarantee the absolute security of your personal information.
If a security breach were to occur, we will promptly investigate the situation and, if there is a real risk, notify affected individuals in accordance with applicable laws and regulations. We also take steps to verify your identity before granting you access to your account, and it's your responsibility to keep your password and account information confidential.
It's important to note that our Services are controlled and operated by Mutual Technologies, Inc. in Canada and are not intended to be subject to the laws or jurisdiction of any other state, country, or territory.
Mutual reserves the right to post and share incident reports, including those involving vehicle damage, Member disputes, and incidents with third parties, within the Mutual Member base. This policy aims to promote transparency and foster a community of trust. Making incident reports accessible is essential for setting precedents for future damage resolutions and shaping carsharing policies. Similar to the public nature of judicial cases in the court system, this practice ensures that all Members are aware of the outcomes and standards applied in resolving issues. This transparency helps maintain high standards of accountability and aids in the continuous improvement of our carsharing policies, ensuring fair and equitable treatment for all Members.
If you opt-in to use our Location Tracking service, you agree to allow us to collect geographical-location data, including location information from your mobile device, the movement of your vehicle, and the movement of the vehicle that you have rented on our platforms. We use this information to share information between Drivers and Owners, and in emergency situations.
Owners have the right to install their own Location Tracking devices in their listed vehicle. Drivers agree to their geographical-location data being shared with booked vehicle's Owner for safety & security of their vehicle.
When you access our platforms, we and third-party companies we work with may place small data files on your computer, such as cookies, to track your usage, for content and marketing, and to measure promotional effectiveness. We also use these technologies to keep your account safe by identifying fraud and other security risks.
As outlined in our Terms of Membership, our Services and platforms are only for BC license holders over 25. We don't want to collect information from anyone who is younger than 18. If you are under 18, please don't use our platforms or give us any information. If you are a parent or legal guardian and your child has given us information by mistake, please contact us right away so we can delete their information and close their account.
We might change our Privacy Policy in the future. If we do, we will update it on this page and put the date of the change at the top. Any changes will be effective as soon as we post them. If you keep using our Services after we tell you about the changes, it means you agree to follow the new policy.
By accessing our Services, you are consenting to this privacy policy. If you do not consent, please contact Member Support immediately at members@gomutual.co or (604) 426-0244. We will send you and delete all personal information we may have on you as described here and in our Terms of Membership.
Thank you for taking the time to read this. Please contact us for any feedback, concerns, or questions at members@gomutual.co.