Privacy · Canada & United States

Your information, plainly.

This policy says what we collect, why we collect it, who else sees it, and what you can ask us to do about it. It covers this website and the booking portal at book.aperiomobility.com.

Last updated 26 September 2026.

Who this policy covers

The company behind Aperio.

It is written to be read. If any part of it is unclear, write to our privacy officer and we will explain it in plain words.

Aperio is a mobile vehicle-maintenance service operating in Canada and the United States. This policy applies to this website, to every form on it, and to the booking portal where you create an account and book a service.

Aperio Mobility Inc.
Company
500-167 Lombard Avenue, Winnipeg, Manitoba R3B 0V3, Canada
Registered office
privacy@aperiomobility.com
Privacy officer
1-833-466-4520
Phone
What we collect, and why

Seven things, each with a reason.

We ask for what a visit needs and nothing more. Everything we hold is listed here, with the purpose it is held for.

What you type into a formYour name, work email, phone number, company and whatever you write in the message box. We use it to answer you, and to set up your account if you become a customer.
Enquiries
Your address, your vehicle and how to reach youThe address the vehicle is parked at, the vehicle itself, and the contact details the technician needs. We use them to confirm you are inside a service area, to schedule the visit and to record the work done. If you start a booking and do not finish it, we keep what you entered — the address, the vehicle and your contact details — for up to 30 days so you can pick it up where you left off.
Bookings
Payment detailsCard payments are taken by Stripe. Stripe holds the card number; we hold only the result of the charge, its amount and its date. Your full card number never reaches our systems.
Payment
How this site is usedPages viewed, which widget or form an event came from, a city, the first three characters of a postal or ZIP code, and a language. Street addresses, email addresses and exact coordinates are stripped before anything is sent. This goes to Google Analytics, Mixpanel and our own server.
Analytics
Which ad brought you hereIf you arrive from an ad or a campaign link: the campaign details in that link (its source, medium and campaign names, and the click identifier the ad service adds), the page you landed on and the website that sent you. They are kept in a cookie for 90 days, so that a booking made in that time can be credited to the ad that led to it.
Advertising
What you type into an address boxTo suggest a complete address as you type, the text in the box is sent to Google Places. Google receives that text; we receive only the address you pick. When you check an address, we keep the full address you entered, with the time and the result, for 24 months. We use it to plan where we expand and how we route our vans, and to connect it to your booking if you book. It is never shared with advertising or analytics services.
Address check
Ordinary server recordsOur content network and our API keep short-lived request records — an address, a time, a page — to serve the site, to stop abuse and to diagnose faults. The network also tells the page which country and region you are in, so the consent rule below can be applied without any external lookup.
Server logs

We do not buy personal information about you from anyone else, and we do not enrich what you give us with data bought from a broker.

Analytics, advertising and your choice

You can turn analytics and advertising off, from any page.

The Privacy settings link in the footer of every page opens the same control the banner uses. The change takes effect at once and is remembered on that device.

Where the law requires us to ask first — Quebec, California, the European Economic Area, the United Kingdom and Switzerland — and on our pages about European cities, wherever you are, nothing is loaded, stored or sent until you accept. Declining changes nothing about the service you get.

Everywhere else in Canada and the United States, analytics begin on your first page view, and a notice on the page says so, with Accept all and Decline all buttons and a link here. That is an implied consent, and you can withdraw it at any time with Decline all or the Privacy settings link. When you decline, we also delete the cookies those tools had already set on this site.

If your browser sends a Global Privacy Control signal, we treat it as a refusal everywhere, without asking. No banner appears and nothing is collected.

With analytics on, Mixpanel also records how each page is used — scrolling, clicks and the page as it was shown — so that we can see where a page gets in the way. Anything typed into a field, and everything inside the address box and our forms, is hidden in those recordings.

Mixpanel keeps an anonymous visitor number in a cookie on this site, mp_1ca07924c83fcc523da25501a9d3dabb_mixpanel, shared with the booking portal at book.aperiomobility.com so that one visit is counted once, for up to 12 months. It is set only once you accept analytics, and deleted when you turn analytics off.

Advertising is a separate choice, with its own switch in the same settings. It follows the same rule as analytics: where the law requires us to ask first, it stays off until you turn it on; everywhere else it is on from your first page view, and you can switch it off at any time. A Global Privacy Control signal always switches it off.

With advertising on, the advertising services listed below set their own cookies on this site and learn which pages you view here, and whether you checked an address we serve, sent us an enquiry or clicked our phone number. Like any web request, this also gives them your IP address and browser type. They use it to tell us which of our ads lead to visits and bookings, and to show our ads to people who have visited this site (retargeting). They never receive the address you type into this site.

When you book with advertising on, we also send some of them a hashed copy of the email address and phone number on the booking: a scrambled code made from each, not the address or number itself, which they compare with the codes of their own users to match the booking to the ad that led to it. We never send them your street address, your vehicle, its VIN or plate, or photos.

If you are a customer who booked with advertising on, we may also share a hashed copy of your email address and phone number with some of them, so that they can show you our ads, or leave you out of them.

To opt out, switch advertising off in the privacy settings before you book, or write to privacy@aperiomobility.com at any time and we will stop sharing your hashed email address and phone number.

We also set three cookies of our own, shared with the booking portal at book.aperiomobility.com: apr_consent remembers your choice for 12 months, apr_attr remembers which ad or link brought you here for 90 days, and apr_cta remembers the last button you pressed until you close your browser.

Each advertising service also offers its own ad settings, in your account with it, where you can limit the ads it shows you.

Who else sees it

A short list of providers, most of them in the United States.

We do not sell personal information. With advertising on, the advertising services below receive information about your visit, which California law calls sharing for cross-context behavioural advertising. You can switch it off at any time.

Google LLCAddress suggestions through Google Places, and site analytics through Google Analytics.
United States
Mixpanel, Inc.Product analytics, shared with the booking portal so one visit is not counted twice.
United States
Google LLCGoogle Ads: tells us which of our ads lead to visits and bookings, and shows our ads to people who have visited this site. It also receives the hashed email and phone described above, for bookings and for customer lists.
United States
Meta Platforms, Inc.Facebook and Instagram ads: tells us which of our ads lead to visits and bookings, and shows our ads to people who have visited this site. It also receives the hashed email and phone described above, for bookings and for customer lists.
United States
Microsoft CorporationMicrosoft Advertising, including Bing: tells us which of our ads lead to visits and bookings, and shows our ads to people who have visited this site. It also receives the hashed email and phone described above, for bookings.
United States
Nextdoor Holdings, Inc.Nextdoor ads: tells us which of our ads lead to visits and bookings, and shows our ads to people who have visited this site.
United States
LinkedIn CorporationLinkedIn ads: tells us which of our ads lead to visits and bookings, and shows our ads to people who have visited this site.
United States
Stripe, Inc.Card payments, and the card details we never hold ourselves.
United States
Amazon Web Services, Inc.Hosting, content delivery and the servers our own application runs on.
Canada and the United States
Google WorkspaceOur email. Anything you write to one of our inboxes is stored there.
United States

Because these providers process information in the United States, that information can be subject to the laws of the country it is in, including lawful access by its courts and public authorities. We also disclose information where Canadian or US law requires it, and to our own professional advisers, who are under a duty of confidence.

How long we keep it

For as long as it is useful — and a service record stays useful for a long time.

You can ask us to delete something sooner. Where the law allows it, we will, and we will tell you if it does not.

Enquiries that did not become a customerSo we can pick up a conversation where it left off.
Until you ask
Unfinished bookingsThe address, vehicle and contact details you entered but did not submit, so you can finish later.
30 days
Addresses you checkThe full address you entered, with the time and the result, to plan where we expand and how we route our vans. Never shared with advertising or analytics services.
24 months
Customer records, service history and invoicesKept for as long as you have an account and afterwards, because tax and consumer-protection rules in Canada and the United States expect a business to be able to produce its records, and because a vehicle's service history is worth keeping for the life of the vehicle.
Long term
Analytics eventsIn Google Analytics, in Mixpanel and on our own server, for as long as those tools keep them under our settings; our own copy stays with the customer record.
With the record
Advertising cookiesOur own campaign cookie, for 90 days after the visit that set it. Each advertising service keeps its own cookies for as long as it sets them, which its own privacy policy states.
90 days
Server and content-network recordsKept for as long as we need them to run and secure the service.
As needed
Your rights

What you can ask us to do.

Write to the privacy officer and we will answer within 30 days. We will ask for enough to be sure the request is really yours, and no more.

i

In Canada

Under PIPEDA you can ask what we hold about you, ask for a copy, ask us to correct it, and withdraw your consent to anything that is not needed to deliver a service you have bought.

ii

In Quebec

Quebec's Law 25 adds the right to have information deleted or its use stopped, the right to a copy in a portable, machine-readable format, and the right to be told if a decision about you was made by automated means. Our privacy officer is named above.

iii

In California

Under the CCPA as amended by the CPRA you can ask what we collected in the past twelve months, ask for it to be deleted or corrected, and ask us not to sell or share it. We will not treat you differently for asking.

Your privacy choices. We do not sell personal information. With advertising on, we share it for cross-context behavioural advertising as described above, and you can opt out of that sharing at any time: the button below opens the privacy settings with advertising already switched off, and Save choices confirms it. A Global Privacy Control signal from your browser opts you out automatically. You can also write to privacy@aperiomobility.com. To switch off analytics as well, use the same settings or the Privacy settings link in the footer.

Children

We do not knowingly collect information from anyone under 16.

This site and the booking portal are meant for adults who own or run vehicles. If you believe a child has given us information, write to the privacy officer and we will delete it.

Security

Encrypted in transit, and seen by as few people as possible.

Everything travels over an encrypted connection, access to customer records is limited to the people whose job needs it, and card numbers never reach our systems. No system is perfect: if a breach ever creates a real risk of serious harm, we will notify the people affected and the regulators, as Canadian and US law requires.

When this changes

The date at the top changes with the policy.

If a change matters — a new provider, a new purpose, a new country — we will say so on this page rather than hope you notice.

Reach the privacy officer
privacy@aperiomobility.com
Email
1-833-466-4520
Phone
500-167 Lombard Avenue, Winnipeg, Manitoba R3B 0V3, Canada
Post

If we cannot settle something between us, you can complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information du Québec if you live in Quebec, or to the California Privacy Protection Agency if you live in California.

The terms you agree to when you book a service are on a page of their own: Terms of service.