Privacy
Privacy through the life of a request.
This page explains what the marketplace needs, who receives it, how long it is retained and how you can request a copy or erasure.
Held
What the service holds
The marketplace limits each use of personal information to an identified purpose.
Your name and a way to reach you
There is no customer password. You give your full name and verify your mobile phone number or your email before the request is sent. Your full name and that verified contact are shared only with the towing company whose offer you accept.
Where the vehicle is
Before your request opens, you separately acknowledge what is broadcast to every eligible independent provider: the vehicle's exact location and any drop-off location, the situation and your answers to its follow-up questions, the vehicle's type, make, model, year and colour (never its plate), any photos and your comments. The number of eligible recipients is not capped, and most may never respond. Your licence plate, name and contact go only to the towing company whose offer you accept. Reads of exact location and accepted contact handoffs are logged without copying the disclosed value.
Photos you add to a request
Photos are optional. Your browser shrinks each one and re-encodes it, which removes location and camera data before upload, and the service refuses any photo that still carries such data. They are stored with your request in the same database, in the same region, and are shown to every eligible provider with the rest of the request. Each time a provider or platform staff member opens one, the view is logged. They are deleted with the request's other details.
Platform staff may review a complete request
To resolve problems, platform staff may open a whole request, including your name, contact and licence plate. Staff are read-only, and every such review is logged.
Cookies, and what each one is for
This site does not leave a cookie in your browser. The language is part of the page URL instead. Signing in sets a separate session cookie on app.towingoffer.com, and that one is host-only, so it is never sent to these pages. Email open and click tracking is off.
Processors and cross-border handling
AWS Simple Email Service (SES) sends transactional email and reports acceptance or failure. AWS End User Messaging, in its Canada (Central) region, texts the one-time code to a mobile number you give; it receives the number and the code, nothing else. Production uses the AWS region selected and documented by DevOps; until that exact region is published, we do not claim Canadian-only processing. Google Places resolves entered or browser-supplied vehicle and drop-off locations into civic descriptions, and matches only the vehicle location to a reviewed service area. Google provides no application-selected Canadian processing region for this use, so that processing may cross borders. Google Routes receives the vehicle location and the drop-off once per towing request, to measure the driving distance the company’s own prices use. The same cross-border statement applies. The vehicle-location and drop-off maps are drawn by Google Maps in your browser, which sends the map area you view and the pins you place to Google.
Retention follows the record lifecycle
Abandoned drafts are deleted 24 hours after verification expiry. Sensitive details on terminal unbooked requests — follow-up answers, comments, vehicle details including the plate, and photos among them — are de-identified after 90 days. Booked records and contact snapshots are de-identified 3 years after the booking ends. Terminal notification metadata is retained for 1 year, while secret notification payloads are scrubbed at their first terminal state. Unaccepted expired or revoked staff invitations are deleted after 30 days. Location and handoff access logs are de-identified after 3 years. Holds and active disputes can delay eligible cleanup.
Not collected
What is not in the system at all
These are not settings that are switched off. There is no place in the system for either of them.
No payment information
The platform takes no payment and charges no commission, so there is no card number, no bank detail and no billing record here. You settle directly with the towing company you chose.
No vehicle tracking
The platform follows neither your vehicle nor your phone. Location is captured for a request and nothing else — no background location, no live position, no trip history.
Access and erasure requests
Use Privacy requests in your signed-in profile to request a CSV copy or early erasure. Your live session verifies control of the contact. Platform staff review the request and complete it or provide a reasoned response within 30 calendar days. An approved CSV download is available only to you for 24 hours. Erasure de-identifies retained marketplace history and may be delayed for an active request or booking, a dispute, a security investigation or a reasoned expiring hold.
Platform staff cannot use privacy review to alter marketplace facts.