October 28, 2026
This policy explains how Buscolaire collects, uses, discloses, retains and protects personal information, taking into account Québec's Act respecting the protection of personal information in the private sector (Law 25) and the obligations of the school organizations we work with.
It applies to the buscolaire.ca website and the Buscolaire platform. It is not a certification of compliance.
Buscolaire builds a school transportation coordination platform in Québec. The person in charge of the protection of personal information can be reached at alysson@ardezign.com, with “Privacy” in the subject line.
We use personal information only for the following purposes:
- responding to requests sent through the website (information, demo, pilot, partnership);
- providing the platform to partner organizations: accounts, routes, trip status, notices and support;
- keeping the service secure: authentication, abuse prevention and logging of sensitive actions;
- meeting our legal and contractual obligations.
Depending on your relationship with Buscolaire, we may process:
- Website requests: name, organization, email, optional phone, profile, message and proof of consent (date and text version). No student information is requested.
- Platform accounts: name, email, language, organization and role.
- Students and parents: information provided by the school or service centre, limited to what transportation requires (student, school, approved stop, links to authorized parents).
- Location: vehicle positions sent by the operator or its telematics provider. We locate buses, not people.
- Technical data: security logs. IP addresses used against abuse are stored in hashed form and for a minimal period.
We collect the minimum necessary. Drivers see the first name and last initial of the students on their run. No medical data is processed unless it is strictly necessary for transportation, in which case it is limited to authorized people. No information about a child appears on public pages or in demos.
Before any real data is processed, a privacy impact assessment (PIA) is completed with each partner organization, and a written agreement sets out each party's responsibilities, data flows and retention rules.
Access is granted by role and organization. These rules are enforced in the database itself (row-level security). Communications are encrypted in transit, data is encrypted at rest by our hosting providers, and administrative roles require multi-factor authentication.
Information is kept as long as needed for the stated purposes. The retention period for raw GPS positions is configurable and set in the agreement with each partner. When an agreement ends, data is deleted or de-identified according to the agreed rules.
We rely on providers for hosting, database and email delivery. They act only on our instructions and under confidentiality obligations. When information is disclosed outside Québec, an assessment is carried out in accordance with Law 25 and adequate protection measures are set out by contract.
- We do not sell personal information.
- We do not build advertising profiles.
- We do not use advertising cookies or third-party tracking tools on this site.
The website only uses strictly necessary cookies: secure session, demo session and essential preferences. No analytics tool or advertising cookie is used.
Under applicable law, you may request access to your information, its correction, withdrawal of your consent, de-indexing or portability of your information. Write to alysson@ardezign.com. When your information was entrusted to us by a school or service centre, we will handle your request together with that organization. You may also contact the Commission d'accès à l'information du Québec.
In the event of a confidentiality incident, we take steps to reduce the risks, keep an incident register, and notify the Commission d'accès à l'information and affected people when the incident presents a risk of serious injury, in cooperation with the partner organization concerned.
This policy may be updated. The date of the latest update appears at the top of the page; significant changes are communicated to partner organizations.