Updated to: Sept 24, 2026
DDS Wireless International Inc. is committed to protecting the security, confidentiality, and privacy of the information entrusted to us.
Our security and privacy practices are designed to support the responsible handling of customer and personal information throughout its lifecycle and to help our customers meet their own privacy, security, and compliance obligations.
Security and privacy are incorporated into how DDS designs, delivers, operates, and supports its products and services.
DDS maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, disclosure, alteration, loss, or misuse.
Our approach is based on the nature and sensitivity of the information involved, the way it is processed, applicable legal and contractual requirements, and the risks associated with the processing.
DDS maintains a privacy governance program designed to support compliance with applicable privacy and data protection requirements.
Responsibility for privacy oversight is assigned within the organization, including responsibility for maintaining privacy policies, procedures, and practices relating to the collection, use, disclosure, retention, protection, and disposal of personal information.
Our privacy governance activities include, where applicable:
defining roles and responsibilities for protecting personal information;
maintaining privacy and data protection policies and procedures;
providing appropriate privacy and security awareness to personnel;
reviewing privacy risks associated with systems, technologies, products, services, and material changes;
conducting privacy impact assessments where required by applicable law;
overseeing service providers and subprocessors that process personal information on our behalf;
maintaining processes for responding to privacy inquiries, complaints, and individual rights requests; and
maintaining processes for identifying, investigating, documenting, and responding to privacy and security incidents.
DDS has designated a Privacy Officer responsible for overseeing privacy compliance and responding to privacy-related questions and requests.
DDS considers privacy throughout the design, development, implementation, and ongoing operation of our products, services, systems, and business processes.
Our approach includes considering:
what personal information is required for a particular purpose;
whether the collection and use of that information can be limited;
how access to information should be controlled;
what security safeguards are appropriate;
how long information should be retained;
how information should be deleted or otherwise disposed of when no longer required; and
privacy risks associated with new technologies, functionality, or processing activities.
Where required by applicable law, DDS conducts privacy impact assessments for systems, technologies, products, services, or material changes involving personal information.
DDS may process personal information in different capacities depending on the circumstances and the services being provided.
DDS acts as a controller when we determine the purposes and means of processing personal information. This may include information processed in connection with our website, sales and marketing activities, business relationships, customer administration, support, recruitment, security, and internal business operations.
When a customer uses a DDS product or service and provides or makes available personal information relating to its passengers, customers, drivers, employees, users, or other individuals, DDS generally processes that information on behalf of the customer.
In these circumstances, the customer determines the purposes for which the personal information is processed, and DDS acts as a processor or service provider as those terms are defined under applicable privacy laws.
When acting on behalf of a customer, DDS processes personal information in accordance with the customer’s instructions, applicable agreements, and applicable privacy and data protection requirements.
DDS applies administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.
Security measures are selected and maintained based on the nature of the systems and information involved, associated risks, and applicable contractual and legal requirements.
DDS regularly considers security as part of the operation and maintenance of its products, services, systems, and supporting business processes.
Access to personal and customer information is intended to be limited to individuals who require access for legitimate business, operational, support, security, or administrative purposes.
DDS maintains processes for managing access to systems and information and for limiting access based on appropriate roles and responsibilities.
Personnel who handle personal or customer information are expected to comply with applicable confidentiality, privacy, and security requirements.
DDS seeks to collect and process personal information that is reasonably necessary for identified business, operational, contractual, or legal purposes.
Personal information is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, meet contractual obligations, support legitimate business requirements, or comply with applicable legal and regulatory requirements.
When information is no longer required, DDS applies appropriate retention, deletion, anonymization, or disposal practices based on the nature of the information and applicable requirements.
DDS may engage third-party service providers and subprocessors to support the delivery, operation, maintenance, security, and improvement of our products, services, and business operations.
Where third parties process personal information on behalf of DDS, we require appropriate contractual privacy, confidentiality, and security obligations.
Depending on the nature of the services and information involved, these obligations may address:
confidentiality;
information security;
permitted uses of personal information;
privacy and security incident notification;
retention and deletion;
compliance with applicable privacy requirements; and
the use of additional subprocessors.
DDS evaluates service providers and subprocessors where appropriate based on the services being provided and the information involved.
Where DDS acts as a processor on behalf of a customer, subprocessors are engaged in accordance with applicable contractual and legal requirements.
DDS and its service providers may process or store information in jurisdictions outside the location where the information was originally collected.
Where required by applicable privacy or data protection laws, DDS applies appropriate contractual, organizational, and technical safeguards to support lawful international processing and transfers of personal information.
These measures may include data processing agreements, contractual protections, and requirements for service providers and subprocessors to maintain appropriate privacy and security practices.
DDS may use artificial intelligence, machine learning, optimization algorithms, and other automated technologies in connection with certain products, services, and business operations.
Depending on the applicable product or service, automated technologies may support functions such as routing, scheduling, dispatching, optimization, forecasting, data analysis, service improvement, customer support, security, or other operational activities.
Where personal information is processed using automated technologies, DDS applies applicable privacy and data protection requirements and considers the privacy risks associated with the processing.
Where a decision concerning an individual is based exclusively on automated processing and applicable law provides additional rights relating to that decision, DDS will provide or support the notices, information, and rights required under applicable law.
Where DDS processes personal information using automated technologies on behalf of a customer, the customer may be responsible for providing applicable notices and responding to individuals, and DDS will assist the customer as required by applicable law and applicable agreements.
Certain DDS products and services are designed to support transportation, mobility, dispatch, scheduling, routing, and related operations.
Depending on the product, service, and customer configuration, personal information processed through DDS systems may include information associated with passengers, customers, drivers, trips, transportation services, pickup and drop-off locations, scheduling, routing, dispatching, or vehicle operations.
DDS processes this information only for applicable operational, contractual, support, security, or other authorized purposes.
When DDS processes this information on behalf of a customer, the customer determines the purposes for which the information is processed and is responsible for providing required notices and establishing an appropriate legal basis for the processing.
Location information is handled in accordance with applicable privacy requirements and the purposes for which it was provided or collected.
DDS maintains procedures designed to identify, investigate, contain, document, and remediate privacy and security incidents involving personal or customer information.
When DDS becomes aware of an incident, we assess factors including:
the nature and scope of the incident;
the systems and information involved;
the individuals or customers potentially affected;
the potential consequences or risks resulting from the incident; and
applicable legal, regulatory, and contractual notification requirements.
Where required by applicable law or contractual obligations, DDS will notify affected customers, individuals, regulatory authorities, or other appropriate parties.
DDS also maintains records of privacy and security incidents where required and takes appropriate measures intended to reduce the likelihood of similar incidents occurring in the future.
DDS maintains processes for responding to requests relating to personal information where DDS is responsible for responding under applicable privacy law.
Depending on the applicable jurisdiction, individuals may have rights relating to access, correction, deletion, portability, consent, certain uses or disclosures of personal information, automated decision-making, or other privacy matters.
Where DDS processes personal information on behalf of a customer, individuals should generally direct privacy requests to the relevant customer. DDS will support customers in responding to applicable privacy rights requests where required by law or applicable agreements.
Additional information regarding individual privacy rights is available in the DDS Privacy Policy.
DDS recognizes that customers and prospective customers may require additional security and privacy information as part of procurement, vendor assessment, due diligence, or RFP processes.
Requests for additional information regarding DDS privacy, security, data processing, or related practices may be submitted to DDS for review.
Information that is confidential, security-sensitive, or not appropriate for public disclosure may be provided separately where appropriate and subject to applicable confidentiality requirements.
For privacy-related questions, requests, or concerns, please contact:
Privacy Officer
DDS Wireless International Inc.
1500 – 450 SW Marine Drive
Vancouver, BC, Canada
V5X 0C3
Email: generalcounsel@ddswireless.com
For additional security or privacy information required as part of an RFP, procurement process, or vendor assessment, please contact your DDS representative.
This Security & Privacy Commitments page provides a general overview of DDS’s approach to security and privacy. It does not replace DDS’s Privacy Policy, contractual commitments, data processing agreements, or other agreements between DDS and its customers.
For additional information about how DDS collects, uses, discloses, retains, and protects personal information, please review our Privacy Policy.