Shared Luggage Technologies Inc. ("Shared Luggage," "We") is committed to protecting the privacy of our users ("You"). This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian laws.
By using sharedluggage.com (the "Platform"), you consent to the practices described in this Policy.

We collect the following categories of personal information:
A. Account Information
• Name, email, phone, password
• Profile picture (if provided)
• Identity verification documents (when required)
B. Shipment & Travel Information
• Item descriptions
• Origin/destination
• Travel itinerary information posted by Travelers
• Messages exchanged between users
C. Payment Information
Processed by Trustap and Stripe, not stored by Shared Luggage:
• Payment card details
• Payout details for Travelers
• Transaction history
D. Technical Data
• IP address
• Device and browser data
• Usage logs
• Cookies and analytics data

We use your information to:
• Operate and provide the Platform
• Match Senders with Travelers
• Facilitate secure payments and payouts
• Support identity verification and safety measures
• Prevent fraud and enforce prohibited items rules
• Meet legal, customs, and compliance obligations
• Provide customer support
• Improve the Platform and user experience
We do not sell personal data.

By creating an account or using our Platform, you provide implied and explicit consent for:
• Collection
• Use
• Storage
• Sharing (only as described below)
You may withdraw consent at any time, except where required for legal/compliance reasons.

We may share personal information with:
A. Payment Processors
• Trustap (escrow)
• Stripe (payment infrastructure)
B. Travelers and Senders
• Only necessary information is shared to complete a delivery.
C. Customs, Border, or Law Enforcement Authorities
When required to comply with:
• Canada Border Services Agency (CBSA)
• Export/import controls
• Anti-fraud laws
• Legal investigations
D. Service Providers
Carefully vetted providers supporting:
• Cloud hosting
• Analytics
• Security
• ID verification
• Messaging services
All are required to protect your information.

We retain data only as long as necessary, including for:
• Operational use
• Fraud prevention
• Payment reconciliation
• Customs audit requirements
• Legal compliance (typically up to 5 years)
After retention periods expire, data is securely deleted or anonymized.

We use administrative, technical, and physical safeguards to protect your information, including:
• Encryption in transit and at rest
• Access controls and authentication
• Secure cloud infrastructure
• Monitoring for suspicious activity
• Regular security reviews
No system is 100% secure, but we take reasonable steps to protect your data.

Under PIPEDA, you may:
• Request access to your personal information
• Request correction or updates
• Request deletion (subject to legal retention requirements)
• Withdraw consent
• File a complaint
Requests can be made to support@sharedluggage.com.

We use cookies for:
• Session management
• Authentication
• Analytics
• Improving website performance
You may disable cookies in your browser settings.

The Platform is not intended for children under 18. We do not knowingly collect personal data from minors.

Your information may be stored or processed in other countries by our service providers. These countries may have different privacy laws.

We may update this Privacy Policy from time to time. We will notify users of significant changes. Continued use of the Platform after changes constitutes acceptance.

For privacy questions, concerns, or data access requests:
📩 support@sharedluggage.com