Last updated: 5 August 2026
This policy explains what personal information we collect, why we collect it, what we do with it, and the rights you have over it. It applies to our website, our email communications, and the personal information we handle in the course of our business.
We have written it to meet our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector as amended by Law 25, the Personal Information Protection Acts of Alberta and British Columbia, and Canada’s Anti-Spam Legislation (CASL). It also covers our obligations to individuals in the European Economic Area and the United Kingdom under the GDPR, and to residents of California.
1. Who we are
TempAid, part of Rapid Aid Corp., carries on business as TempAid and as TempAid Cold Chain Packaging. In this policy, "we," "us" and "our" mean the TempAid business, including where we are operating under either of those names.
Address: 4085 Sladeview Crescent, Units 11-14, Mississauga, Ontario L5L 5X3, Canada
General inquiries: info@tempaid.com · 905-820-4788
2. Our privacy officer
We have designated a person responsible for the protection of personal information within our organization. That person is accountable for our compliance with this policy and with applicable privacy law, and is your first point of contact for any question, request or complaint.
Privacy Officer, TempAid
info@tempaid.com · 905-820-4788
Written inquiries may be sent to the registered address above, marked to the attention of the privacy officer.
Where Quebec law applies, the person exercising the highest authority in the business is responsible for ensuring the law is complied with, and may delegate that role in writing. Our current designation is published above and is kept up to date.
3. The personal information we collect
We collect only what we need for the purposes set out in section 4. The categories are:
Information you give us
- Contact details: name, business email address, telephone number, company name and job title, submitted through our website forms, by email, or in person at trade events.
- The content of your inquiry, including the type of request and any message you write.
- Whether you have consented to receive marketing communications from us, and the date and time you gave or withdrew that consent.
- Information relating to orders, quotations, shipping and payment where you become a customer.
- Any information you choose to give us in correspondence, on a call, or in a meeting.
Information collected automatically
- Technical information about your device and connection, including IP address, browser type and operating system.
- Information about how you use our website: pages visited, time spent, links clicked, and the site or search that brought you to us.
- Whether you opened or clicked a link in an email we sent you, where you have not opted out of that tracking.
Section 9 explains the cookies and similar technologies we use for this and how to control them.
Information from other sources
- Contact details collected at trade shows and industry events, including from event organizers and buying groups where they have provided them to us.
- Publicly available business information, such as a company website or professional directory.
Sensitive information
We do not seek sensitive personal information and ask that you do not send it to us. We do not collect biometric information. We do not knowingly collect personal information from children, and section 16 explains our position on minors.
4. Why we collect it
We identify our purposes at or before the time we collect personal information, and we do not use it for a new purpose without asking you first. Our purposes are:
- Responding to your inquiry — Answering questions, providing quotations, sending product and technical information you have asked for.
- Supplying our products and services — Processing and fulfilling orders, arranging shipping, invoicing, providing support, and managing the customer relationship.
- Marketing communications — Sending newsletters, product updates, event invitations and announcements, where we have your consent or are otherwise permitted to do so under CASL. Section 8 sets this out in full.
- Improving our website and our products — Understanding how our website is used and how our products perform, so we can improve both.
- Meeting our legal obligations — Complying with tax, accounting, product-safety, customs and privacy law, and keeping the records those laws require, including records of the consents we rely on.
- Protecting our business — Preventing and investigating fraud, misuse of our website, and security incidents, and establishing or defending legal claims.
5. Consent, and how to withdraw it
We collect, use and disclose personal information with your knowledge and consent, except where the law permits or requires us to do otherwise.
Consent must be clear, informed, and given for a specific purpose. We ask for it separately for each purpose, in plain language. Where consent is requested in writing, we present the request separately from other information rather than bundling it into terms and conditions.
We rely on your express consent for marketing communications. Express consent means you took a positive action, such as ticking an unticked box, to tell us you wanted to hear from us.
In some situations we rely on implied consent, or on an exception in the law. For example, if you contact us to inquire about our products, we take it that you consent to us using your details to answer you. Where CASL allows us to send commercial messages on the basis of an existing business relationship or a recent inquiry rather than express consent, we say so in section 8.
You can withdraw your consent at any time, subject to legal and contractual limits, and we will tell you what the consequences of withdrawing would be. To withdraw consent to marketing email, use the unsubscribe link in any message we send, or contact our privacy officer. To withdraw any other consent, contact our privacy officer. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
6. When we share personal information
We do not sell personal information, and we do not disclose it to another organization for that organization’s own marketing. We share it only as described here.
Service providers
We use third parties to run parts of our business, and they handle personal information on our behalf and on our instructions only. The categories are: customer relationship management and email delivery (HubSpot); website hosting and analytics; shipping, freight and logistics; payment processing; accounting; and IT support and security.
We require our service providers by contract to protect personal information, to use it only for the purposes we specify, and not to disclose it further. Where a service provider is outside Canada, section 7 applies.
Other disclosures
- To a purchaser or prospective purchaser of our business or assets, in which case personal information is disclosed subject to confidentiality obligations and used only to evaluate and complete the transaction.
- Where we are required or permitted by law to do so, including in response to a court order, subpoena, or a lawful request from a regulator or law enforcement.
- Where necessary to establish, exercise or defend a legal claim, or to protect the rights, safety or property of any person.
- With your consent, in any other case.
7. Personal information processed outside your province or country
Some of our service providers, and some of our own operations, are located outside Canada. Personal information we hold may therefore be stored or processed in Canada, the United States, China and Vietnam.
When personal information is in another country it may be accessible to the courts, law enforcement and national security authorities of that country under its laws. That is true regardless of the protections we put in place, and we say so plainly rather than implying otherwise.
Before we transfer personal information outside Canada we satisfy ourselves that it will receive a comparable level of protection, and we impose contractual protections on the recipient. Where Quebec law applies, we carry out and document an assessment of the privacy implications before communicating personal information outside Quebec, taking into account how sensitive the information is, what it will be used for, the protections that would apply to it, and the legal framework of the receiving jurisdiction. We only proceed where that assessment shows the information would be adequately protected, and the transfer is covered by a written agreement.
If you would like written information about our policies and practices regarding service providers outside Canada, or want to ask a question about a specific transfer, contact our privacy officer using the details in section 2.
8. Marketing email, and how we comply with CASL
Canada’s Anti-Spam Legislation governs commercial electronic messages. It applies to messages sent from a computer in Canada regardless of where the recipient is, so it applies to all of our marketing email, not only email to Canadian recipients.
The basis on which we email you
We send marketing email only where we have one of the following:
- Your express consent, given by a positive action such as ticking a box on our website form. We record the date, the time and the wording you were shown.
- An existing business relationship with you, which under CASL includes a purchase or contract within the previous two years, or an inquiry you made to us within the previous six months.
- Another basis that CASL permits, such as your publication of a business email address alongside a role to which our message relates, where the message is relevant to that role and you have not told us you do not want to receive it.
What we tell you when we ask for consent
When we ask for your consent to send you marketing email, we tell you what we will send, who is asking, and that you can withdraw your consent. Our consent request gives the business name of the company asking, its mailing address, and a way to contact it. The consent box is never pre-ticked, and consent to marketing is never bundled into acceptance of terms and conditions.
The wording of our consent checkbox is:
Yes, I would like to consent to being subscribed to receive communication from TempAid, including newsletter, updates and announcements. You can unsubscribe from any email.
Every message we send
Each marketing email identifies us, gives our mailing address and a means of contacting us, and contains an unsubscribe mechanism that is easy to find and easy to use. The unsubscribe link works for at least 60 days after the message is sent, and we act on unsubscribe requests without delay and in any event within 10 business days.
Our records
Under CASL, the burden of proving consent falls on us. We keep records of the consents we rely on, including the date and time, the method and source of the consent, and the wording of the request that was shown. We keep records of unsubscribe requests and the action we took. We keep these records for as long as we rely on the consent and for the period after that during which a complaint could be brought.
9. Cookies, analytics and tracking
Our website uses cookies and similar technologies. We group them as follows:
- Necessary cookies, which the site cannot work without. These are always active.
- Functionality cookies, which remember choices you make, such as a language preference.
- Analytics cookies, which tell us how the site is used so we can improve it. We use Google Analytics, loaded through Google Tag Manager.
- Advertising and remarketing cookies, set by third parties, which follow your browsing so that advertising can be targeted to you, including on other websites after you have left ours.
Necessary cookies are always active. Analytics and marketing tags currently load on every visit, and you can block or delete cookies through your browser settings; doing so may affect how parts of the site work. To ask us to exclude you from analytics, contact our privacy officer.
Our email tracking tells us whether a message was opened and whether a link was clicked. If you would rather we did not track this, tell our privacy officer and we will exclude you, or unsubscribe and we will stop sending altogether.
10. Automated decisions
We do not make decisions about you based only on automated processing of your personal information, without human involvement.
If that changes, we will tell you at the time we tell you the decision. On request we would then tell you what personal information was used, the main reasons and factors behind the decision, and your right to have that information corrected, and we would give you the opportunity to make your views known to someone able to review the decision.
11. How long we keep it
We keep personal information only as long as we need it for the purposes in section 4, or as long as the law requires us to keep it, and then we destroy, erase or anonymize it.
We have policies covering the whole life of the personal information we hold, including who is responsible for it at each stage, how long it is kept, and how it is destroyed. A copy of the relevant parts is available from our privacy officer on request.
12. How we protect it
We protect personal information with safeguards appropriate to how sensitive it is. These include restricting access to those who need it for their work, contractual protections on our service providers, physical security at our premises, and technical measures including encryption in transit, access controls and monitoring.
No system is completely secure, and we do not claim otherwise. If something goes wrong, section 14 explains what we do.
13. Your rights
You have the following rights over the personal information we hold about you. To exercise any of them, contact our privacy officer using the details in section 2. We will respond within 30 days, and will tell you if we need longer and why. We may ask you to confirm your identity first, so that we do not disclose your information to someone else.
- Access — You can ask what personal information we hold about you, how we have used it, and who we have disclosed it to, and receive a copy.
- Correction — You can ask us to correct information that is inaccurate, incomplete or out of date.
- Withdraw consent — You can withdraw consent at any time, subject to legal and contractual limits. See section 5.
- Portability — Where Quebec law applies, you can ask us to give you the computerized personal information you provided to us in a structured, commonly used format, or to send it to another organization authorized to collect it. This covers information you gave us, not information we created or inferred.
- Deletion or de-indexing — You can ask us to stop disseminating your personal information, or to de-index a link to it, where the law gives you that right. You can ask us to delete information we no longer need.
- Complain — You can complain to us and, if you are not satisfied, to a regulator. See section 18.
We do not charge for these requests. If a request is one we cannot act on, we will tell you why in writing and explain how to challenge that decision.
14. If there is a breach
If personal information we hold is lost, accessed without authorization, or disclosed in a way it should not have been, we act to contain it and to reduce the risk of harm, and we take steps to stop it happening again.
Where a breach creates a real risk of significant harm to you, we report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible. Where Quebec law applies and an incident presents a risk of serious injury, we promptly notify the Commission d’accès à l’information and each affected person. Where Alberta law applies we notify the Alberta Information and Privacy Commissioner without unreasonable delay, and notify individuals if the Commissioner requires it. We also notify other organizations where doing so could reduce the risk of harm.
We keep records of every breach, whether or not it was reportable, and we keep a register of confidentiality incidents. Those records are available to the regulators on request.
15. If you are in Quebec
Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, applies to us in respect of personal information we collect from people in Quebec. In addition to everything else in this policy:
- The title and contact details of the person in charge of the protection of personal information are published in section 2.
- We tell you at the point of collection why we are collecting information, how, your rights of access and correction, your right to withdraw consent, and the possibility that the information could be communicated outside Quebec.
- We carry out privacy impact assessments where the law requires, including before communicating personal information outside Quebec and before we build or overhaul a system that handles personal information.
- You have the right to data portability described in section 13, and the right to ask us to cease disseminating information or de-index a link to it.
- Personal information of a child under 14 is not collected without the consent of a parent or guardian, unless collecting it is clearly for the child’s benefit.
16. Children and young people
Our website and our products are directed at businesses, not at children, and we do not knowingly collect personal information from a child. Where Quebec law applies we do not collect personal information from a person under 14 without the consent of a parent or guardian, unless the collection is clearly for that person’s benefit.
If you believe a child has given us personal information, contact our privacy officer and we will delete it.
17. If you are in Alberta or British Columbia
Alberta’s and British Columbia’s Personal Information Protection Acts apply to personal information we handle in those provinces. Our designated privacy officer and their contact details are published in section 2, and our policies and practices are available from that officer on request. Before or at the time we collect personal information we tell you why we are collecting it and give you the contact details of someone who can answer questions about the collection. Where we use a service provider outside Canada, section 7 explains how to obtain written information about our practices and who to contact with questions.
18. How to complain
If you have a concern about how we have handled your personal information, contact our privacy officer first. We will acknowledge your complaint, investigate it, and tell you the outcome and what we have done about it. If we got something wrong we will correct it, and we will change our practices where the complaint shows they need changing.
If you are not satisfied with our response you can complain to the regulator:
- Anywhere in Canada, and for federal matters — Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376
- Quebec — Commission d’accès à l’information du Québec — cai.gouv.qc.ca
- Alberta — Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca
- British Columbia — Office of the Information and Privacy Commissioner for British Columbia — oipc.bc.ca
- Concerns about our email specifically — Canadian Radio-television and Telecommunications Commission — crtc.gc.ca — or the Spam Reporting Centre at fightspam.gc.ca
- European Economic Area or the United Kingdom — Your national data protection authority, or the UK Information Commissioner’s Office at ico.org.uk
19. If you are in the European Economic Area or the United Kingdom
Where the GDPR or the UK GDPR applies to our processing, we rely on the following legal bases: your consent, for marketing communications and non-essential cookies; the performance of a contract with you, or steps taken at your request before entering into one; compliance with a legal obligation; and our legitimate interests in running, protecting and improving our business, where those interests are not overridden by your rights.
You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, including the right to object to processing based on legitimate interests and to direct marketing at any time. Where we rely on consent you may withdraw it at any time. You may lodge a complaint with your supervisory authority.
Where we transfer personal information out of the EEA or the UK we do so on the basis of an adequacy decision or standard contractual clauses, together with any additional measures the transfer requires.
20. If you are a California resident
Under the California Consumer Privacy Act as amended, you have the right to know what personal information we collect, use, disclose and sell or share; the right to delete personal information we hold about you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information and of targeted advertising; and the right not to be discriminated against for exercising any of these rights.
The categories we collect, our purposes, and the categories of recipients are set out in sections 3, 4 and 6. To make a request, contact our privacy officer using the details in section 2. You may use an authorized agent, and we may ask for proof of their authority. We will respond within 45 days and may extend that once, with notice, where reasonably necessary.
We do not sell personal information for money. Some of the analytics and marketing tags described in section 9 may involve sharing personal information for cross-context behavioral advertising. If you would like us to stop, contact our privacy officer using the details in section 2 and we will exclude you.
Do Not Track
California law requires us to tell you how we respond to Do Not Track signals from your browser. Our website does not respond to Do Not Track signals. Some third-party websites do track your browsing across sites, and you can set your browser preferences to tell them you do not want to be tracked. Section 9 explains the controls we offer over our own cookies.
21. Links to other websites
Our website links to sites we do not control, including our social media pages. This policy does not apply to them. We suggest you read the privacy policy of any site you visit.
22. Changes to this policy
We may update this policy. When we do, we will change the "Last updated" date at the top and, where the change is significant, tell you by email or by a notice on our website. We keep previous versions and can tell you which version applied at a particular time, which matters where the version you were shown is the basis of a consent we rely on.
23. Contact us
TempAid, part of Rapid Aid Corp.
4085 Sladeview Crescent, Units 11-14, Mississauga, Ontario L5L 5X3, Canada
Attention: Privacy Officer