Privacy policy
Last updated: November 14, 2026
This policy explains what personal information Mecanoo collects, why, who it is shared with, how long it is kept and how to exercise your rights, in accordance with Québec’s Act respecting the protection of personal information in the private sector (Law 25).
1. Person in charge
Mecanoo’s person in charge of the protection of personal information can be reached at support@mecanoo.ca. They answer requests for access, correction or withdrawal, and any question about this policy.
2. Information collected
Drivers: email address, chosen language, bookings (garage, service, date, amount), consent to reminders, and, if you give them to a garage, your name, phone number, vehicle (make, model, plate, mileage) and tire storage. A contact request contains your name, your message and, if you leave them, your email and phone number.
Garages and their members: email, role, garage details (legal name, NEQ, address, phone, tax numbers), review documents, logo and photos, prices, hours, customers, invoices, messages to support, plan.
Location: to suggest nearby garages, your city is estimated from your IP address; if you allow it, your device’s location is used to find your address. Neither is stored.
Device: if you turn on notifications, your browser’s subscription address is kept to send them.
3. Why we use it
- Open and secure your account (sign-in code by email).
- Book, reschedule or cancel an appointment, and notify the garage and the customer.
- Send confirmations, reminders and invoices.
- Let garages manage their appointments, customers and billing.
- Review garages before listing, handle disputes and answer support requests.
- Bill garage plans.
4. Consent and reminders
Appointment reminders, seasonal reminders and follow-ups are only sent to customers who accepted them. Every reminder email contains an unsubscribe link, and you can withdraw your consents at any time from your account. Withdrawing consent does not delete your account.
5. Who it is shared with
The garage you book receives the information needed for the appointment. Mecanoo sells no personal information and uses no advertising trackers. Mecanoo relies on these providers:
| Provider | Role | Location |
|---|---|---|
| OVH | Database | Canada |
| Cloudflare | Site and application hosting, files | Global network; the application may run in the United States |
| Resend | Sending emails | United States |
| Stripe | Garage plan payments | Canada and United States |
| OpenStreetMap (Nominatim, OSRM, tiles) | Address search, map, driving route | Europe |
| GeoJS | City estimated from the IP address | United States / Europe |
| Natural Resources Canada | Garage location from its address | Canada |
| Google (Tag Manager, Analytics) | Audience measurement, only if you accept it | United States |
Some information may therefore be processed outside Québec. Mecanoo chooses providers that offer adequate protection and sends them only what is strictly needed.
6. Retention
Information is kept while the account is active and the service requires it. Invoices are kept as long as tax laws require (six years). Sign-in codes expire after a few minutes. A suspension deletes nothing; deletion is done on request, except what the law requires us to keep.
7. Security
Connections are encrypted (HTTPS). Sign-in uses one-time codes, two-step verification is available for sensitive accounts, and sensitive look-ups by the Mecanoo team (customer list, booking, invoice or message opened by support) are logged. A confidentiality incident presenting a risk of serious injury is reported to the Commission d’accès à l’information and to the people concerned.
8. Your rights
You can ask to access, correct, delete or transfer your information, and withdraw your consent, by writing to support@mecanoo.ca. You will get an answer within 30 days. If you are not satisfied, you can contact Québec’s Commission d’accès à l’information.
9. Cookies and local storage
Mecanoo uses necessary cookies: the sign-in session (mecanoo_access), the chosen language (mecanoo_lang) and your audience-measurement choice (mecanoo_consent). Your browser also keeps, locally, the “Later” choice for the notifications prompt. No advertising cookies are used.
Audience measurement. Only with your consent, Mecanoo measures site traffic with Google Analytics, through Google Tag Manager: pages viewed, time spent, device, approximate city. These measurements help improve the site; they are not used for advertising or profiling. Without consent, no measurement cookie is set. You can change your mind at any time.
10. Changes
This policy may change. The update date is shown at the top of the page; a significant change is announced before it takes effect.