How SSP Group handles personal information

SSP Group (“SSP”, “we”, “our”, “us”) provides asset-based freight transportation and managed logistics services across Canada, the United States, and Mexico. This notice applies to personal information processed through our public website, customer and carrier communications, quote and contact submissions, recruiting activity, and related operational tooling.

Where applicable, this notice is designed to meet the expectations of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (Law 25), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), and comparable privacy frameworks in jurisdictions where our customers operate.

• Contact and account information. Name, business email, phone number, company, job title, and mailing or billing address provided when requesting a quote, submitting a contact form, or applying for a role.
• Shipment and operational data. Origin and destination details, commodity description, equipment needs, service level, appointment windows, and related information required to price and execute freight moves.
• Candidate information. Resume, work history, driver qualification information (where lawful and role-appropriate), references, and other content submitted through careers or driver forms.
• Technical information. Device, browser, approximate location derived from IP address, referral source, and interaction data collected through cookies and similar technologies when permitted.
• Communications. Records of messages exchanged with our sales, customer service, safety, and operations teams, including email, chat, and voice communications where we are a participant.

We do not knowingly collect special-category information such as government identifiers, biometric data, or health data through the public website, and we ask that you do not submit it through our forms.

• Respond to quote requests, answer inquiries, and qualify prospective engagements.
• Plan, execute, and document freight moves across our North American network.
• Operate customer service, carrier communications, safety, and compliance workflows.
• Evaluate candidate applications and support recruiting decisions.
• Measure website usage, identify friction, and improve content and navigation.
• Safeguard systems, prevent misuse, investigate incidents, and meet legal or regulatory obligations.

Where consent is the required basis, we collect it explicitly. In other cases we rely on one or more of the following lawful bases:

• Contractual necessity. To evaluate, enter into, and perform service agreements or employment engagements.
• Legitimate interests. To operate our freight network responsibly, prevent fraud, secure systems, and improve customer experience — balanced against your rights and expectations.
• Legal obligation. To meet regulatory, tax, safety, and transportation compliance requirements.
• Consent. For optional analytics cookies and any other processing that requires opt-in under the applicable law.

You may withdraw consent for analytics cookies at any time without affecting the lawfulness of prior processing.

Our website uses strictly necessary cookies to operate securely and to remember your preferences. With your permission we also use analytics cookies to measure aggregated page views and CTA clicks so we can improve the site. We do not operate advertising or retargeting cookies.

For the current cookie inventory and category descriptions, see our Cookie Policy. Preferences can be changed at any time through Cookie Preferences.

We do not sell personal information and we do not share it for cross-context behavioural advertising. Information is disclosed only in the circumstances listed below and always under contractual or legal controls appropriate to the purpose.

• Service providers. Hosting, email, analytics, recruiting, and productivity platforms that operate under written agreements limiting use of the data to providing services to us.
• Operational partners. Carriers, brokers, customs brokers, and other logistics counterparties when disclosure is required to plan, execute, or document a specific shipment.
• Professional advisors. Legal, accounting, insurance, and audit advisors under duties of confidentiality.
• Authorities and law enforcement. Where required by law, court order, or to respond to a credible safety or security threat.
• Corporate transactions. In connection with a reorganisation, merger, financing, or sale, subject to continued protection of the information.

SSP operates across Canada, the United States, and Mexico, and uses service providers headquartered in those countries as well as other jurisdictions. When personal information is transferred across borders, we apply contractual and organisational safeguards appropriate to the receiving country. Individuals located in Canada should be aware that information may be accessed by authorities in the jurisdictions where it is stored or processed.

We retain personal information only for as long as needed to fulfil the purposes for which it was collected, comply with tax and transportation retention requirements, resolve disputes, and enforce our agreements. Retention periods are reviewed on a scheduled basis and information is deleted, anonymised, or aggregated when it is no longer required.

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold. Controls include access segregation, encrypted transport, structured logging, vendor security review, and documented incident-response procedures. No system is absolutely secure, but we take our stewardship obligations seriously and continuously improve our posture.

Depending on where you reside, you may have the right to access, correct, delete, port, or restrict processing of personal information we hold about you, and to withdraw previously-given consent. Residents of California and similar jurisdictions may have additional rights such as the right to know, the right to correct, the right to delete, and the right to opt out of selling or sharing — which SSP does not engage in.

To exercise a right, contact us using the details below. We will verify your identity before responding and reply within the timelines required by the applicable law.

Our website and services are directed to business users. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can take appropriate action.

We update this policy periodically. The version shown here is current as of the date indicated at the top. Material changes will be signalled on this page; continued use of the website after an update constitutes acceptance of the revised policy.

For privacy questions, to exercise your rights, or to raise a concern, please contact our Privacy Officer:

• Email. cs@sspgroup.com
• Phone. +1 (519) 968-3632
• Online. Submit a request through our contact page.