Privacy policy

Who we are

ParkCommand ("ParkCommand", "we", "us") provides parking management software for condominiums, rental buildings, offices, plazas and parking operators, and runs this website at parkcommand.ca. ParkCommand is a BlazeWave Networks company; the technology is built and operated with Felix IT Solutions. We are based in Ontario, Canada, and we handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

Our two roles

We hold personal information in two different capacities, and the difference matters for who you should ask about it:

As the company behind this website and our sales and support. When you browse parkcommand.ca, ask for a demo, become a customer or contact support, we decide how that information is used. This policy covers it fully.
As a service provider to our customers. When a building or company (our "customer") uses ParkCommand, the residents, visitors, staff and drivers in its records belong to that customer. We process that information on the customer's instructions, under our agreement with them, and only to run the service. If you are a resident, guest or driver, the building or company that manages your parking is your first point of contact; we will help them answer you.

What we collect

On this website

What you send us: your name, company, email address, phone, the type and number of buildings you manage, and your message when you use the demo or contact form.
Basic technical data: like any website, our hosting provider receives your IP address, browser type and the pages requested, and keeps standard server logs for security and troubleshooting.
Choices saved in your browser: your cookie choice, and, if you allow preference storage, your light or dark theme and any parking guide you are drafting. These stay on your device. See our cookie policy.

We do not run advertising trackers, analytics services or social media pixels on this website.

In the ParkCommand platform

What is collected depends on how a customer sets up its buildings. Typically:

Account holders (managers, front desk, patrol, residents): name, email, phone number, role, the buildings and units they are linked to, sign-in records and security settings such as two-factor authentication.
Residents and their vehicles: unit, contact details, licence plates, vehicle descriptions, assigned spots, permits and rentals.
Visitors and drivers: licence plate, the unit or person visited, visit times, contact details given for the pass, an optional reason for the visit and an optional photo of the vehicle.
Enforcement records: plate checks, patrol visits with their time and location, parking notices, photos taken as evidence, disputes and their outcomes.
Payments: when a building takes payments online, cards are typed into the payment processor's secure page and never reach ParkCommand. We receive the amount, date, status and a reference so payments can be matched and reported.
Messages: the emails and text messages the platform sends (for example a pass or a notice), and whether they were delivered.

How we use it

To provide the service: issuing passes, approving requests, checking plates, sending notices, taking payments and producing the reports each customer asks for.
To keep accounts and buildings secure: authenticating users, detecting misuse, keeping audit logs and investigating incidents.
To support customers and answer questions, including demo requests sent through this website.
To bill our customers and keep the business records the law requires.
To maintain and improve the platform, using technical data about how the service performs. Customers' resident, visitor and driver records are never used to market to those people.

We never sell personal information, nor rent or trade it.

The customer that manages your parking, and the staff and contractors it authorizes (for example a security company doing patrols).
Service providers we rely on to run ParkCommand: hosting and network security, encrypted backup storage, email delivery, text-message delivery and, where a building takes online payments, the payment processor. Each receives only what it needs to do its job and is bound to protect it.
Legal reasons: when we are required to by law, a court order or a lawful request from authorities, or to protect people's safety or our rights.
Business changes: if ParkCommand is merged or sold, personal information may transfer to the new owner under the same protections, and we will tell customers first.

Some of these providers may store or process information outside your province or outside Canada. When that happens, the information is subject to the laws of that place, and we require the same level of protection by contract.

How long we keep it

Each customer sets how long its parking records are kept: passes, notices, photos, patrol logs, messages and audit history, within minimums we set so that disputes and security reviews remain possible. When the period ends, the records are deleted automatically. Demo and contact requests are kept while we are in touch with you and for up to two years afterwards, unless you ask us to delete them sooner. When a customer leaves ParkCommand, its data is returned or deleted as set out in our agreement with that customer; encrypted backups age out on their normal schedule.

How we protect it

Each customer's data is kept separate from every other customer's, enforced both in the application and in the database. Connections are encrypted, passwords are stored only as strong one-way hashes, two-factor sign-in and single sign-on are available, sensitive settings are encrypted, every action is written to an audit log, and backups are encrypted before they leave our servers. The data safety page has the details. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify the affected customers, the people involved where required, and the Privacy Commissioner of Canada.

Your rights and choices

Access and correction: you can ask what personal information we hold about you and have it corrected.
Withdrawing consent: you can withdraw consent to optional uses, such as marketing emails, at any time; doing so does not affect the service you have asked for.
Deletion: you can ask us to delete information we hold for our own purposes. Records we hold for a customer are deleted through that customer.
Your browser: you can change your cookie choice at any time with "Cookie settings" at the bottom of every page.

We answer requests within 30 days. If you live in Quebec or another province with its own privacy law, you have the rights that law gives you as well. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or your provincial commissioner.

Cookies

This website asks before storing anything that is not strictly needed. The ParkCommand platform uses one sign-in cookie, which is required for it to work. The cookie policy lists everything.

Children

ParkCommand is a business tool and is not directed at children. Account holders must be adults; a visitor pass may name a younger driver only as information that the resident or the building supplied.

Changes to this policy

When we change this policy we update the date at the top. If a change is significant, we tell customers before it takes effect.

Contact us

Our privacy officer answers questions and requests about personal information: [email protected], or call +1 (905) 215-2865 ext 8.