Privacy Policy

Account details (name, email, phone), driver credentials (licence, insurance, CVOR, TDG, vulnerable-sector check), facility business details, and delivery logistics data including recipient name, phone number and delivery address. We do not collect clinical or diagnostic information; package contents are described only by generic category (e.g. "lab sample").

All traffic is encrypted in transit with TLS/HTTPS. Recipient personal information (name, phone, proof-of-delivery recipient details) is additionally encrypted at rest with AES-128 field-level encryption before it is written to the database. Access follows least-privilege: drivers see only the logistics fields required to complete a delivery, and full addresses and recipient details are revealed only after a job is assigned to them. Every access to and change of a delivery record is written to a tamper-evident audit log that cannot be edited or deleted.

Facilities must confirm the recipient's consent to the delivery and to the handling of their personal data before booking transport. SMS delivery updates are sent only with explicit consent, every message includes "Reply STOP to opt out", and STOP requests are honored immediately and permanently.

Recipient personal information (name, phone, signature evidence) is automatically redacted after the configured retention period (default 365 days) while non-identifying delivery statistics are preserved for billing and compliance. Retention length is administrator-configurable and every purge is recorded in the audit log.

MediTrans is configured for Canadian data residency (ca-central). Production infrastructure — database, object storage and compute — is provisioned in Canadian regions so personal information remains in Canada.