Data Retention Policy

Last updated: September 25, 2026

This Data Retention Policy describes how long Affordrive retains personal information collected through the pre-qualification platform and the procedures for its secure deletion. This policy supports our compliance with PIPEDA's data minimization and retention principles.

1. Retention principles

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. When information is no longer needed, it is securely deleted or anonymized.

2. Retention periods

Active pre-qualification leads

Consumer lead data (identity, financial, credit, and vehicle preferences) is retained for 24 months from the date of submission. This allows dealerships to follow up on financing and supports consumers who return to re-qualify.

Funded or sold leads

Leads that result in a completed sale are retained for 7 years from the date of the transaction to comply with financial record-keeping requirements and support dispute resolution.

Dealership account data

Dealership profiles and dealer account credentials are retained for the duration of the dealership relationship and for 12 months after termination, after which they are permanently deleted.

Funnel and analytics data

Anonymous session-level funnel events and analytics data are retained for 18 months, after which they are automatically purged.

Email communication logs

Records of lead alert emails and daily reports sent to dealerships are retained for 12 months.

3. User-requested deletion

Consumers may request deletion of their personal information at any time by contacting info@affordrive.ca. We will process the request within 30 days. Where legal or contractual obligations require us to retain certain records (e.g., funded transaction records), we will inform the consumer of the specific retention requirement and retain only the minimum data necessary.

4. Dealership data deletion

When a dealership relationship ends, all consumer data accessible to that dealership through the platform is revoked immediately. The dealership is required to delete any locally stored copies within 10 business days, as specified in our Dealership Data-Sharing Agreement.

5. Deletion procedures

Data eligible for deletion is processed through the following steps:

  • Identification: Records past their retention period are identified via scheduled review
  • Verification: Each record is checked against legal hold requirements before deletion
  • Secure deletion: Records are permanently removed from the production database and backups within 90 days
  • Confirmation: Deletion is logged with a timestamp and record identifier for audit purposes

6. Legal holds

If Affordrive becomes subject to litigation, investigation, or other legal proceedings, a legal hold may suspend the deletion of relevant records until the hold is released. Records under legal hold are retained securely and deleted promptly once the hold is lifted and the retention period has expired.

7. Data minimization

We collect only the personal information necessary for pre-qualification and dealership matching. We do not collect government identification numbers, social insurance numbers, or banking credentials at any stage of the pre-qualification process.

8. Policy review

This policy is reviewed annually and updated as needed to reflect changes in legal requirements or business practices. Material changes will be posted on this page.

    base44
    Edit with Base44