Privacy Policy

Who we are

RRA Group Inc. ("RRA", "we", "us", "our") is a freight forwarding company incorporated in British Columbia, Canada, with our principal place of business at 8536 Richardson Drive, Surrey, BC V4N 5J1. We operate the website at rragroup.ca (the "Site").

This Privacy Policy explains how we collect, use, disclose, and protect personal information that you provide to us through this Site. It applies only to information submitted or collected through rragroup.ca — it does not govern personal information exchanged in connection with a separate freight forwarding, customs brokerage, inland transportation, or warehousing service agreement, which is handled under the terms of that agreement.

RRA Group Inc. is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA BC). Where both apply, the more protective standard governs.

What information we collect

1. Information you give us directly

We collect personal information only when you choose to submit it through one of our web forms. Depending on the form, we collect the following:

Request a Freight Quote — Name, company name, work email address, phone number, shipment origin and destination, mode of transport, commodity description, container type (if applicable), estimated weight or volume, preferred ready date, services of interest, including freight forwarding, customs brokerage, ground freight, warehousing, and related logistics services, whether you would like to discuss cargo insurance options, and any additional details you include in your message.

Start Your Onboarding — Legal company name, operating or trade name (if different), business number or tax ID, country of incorporation, company website, primary contact name, work email, phone number, the services you require, how you heard about RRA, and any notes or context you choose to provide.

Contact — Name, company name, work email address, phone number, country and city, the subject or topic of your inquiry, optional shipment origin and destination, and the body of your message.

Each form includes an automated anti-spam mechanism (a "honeypot" field) that is invisible to users and is not used to identify or profile you.

We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete it.

2. Information collected automatically

When you visit rragroup.ca, certain technical information is collected automatically by our hosting and analytics infrastructure. This may include:

• IP address and approximate geographic location (country/city level)
• Browser type and version
• Operating system
• Referring URL (the page you came from)
• Pages viewed and time spent on each page
• Date and time of your visit
• Device type (desktop, tablet, mobile)

This information is collected using cookies and similar technologies (described below) and is used in aggregate form to understand how visitors use the Site and to improve it. We do not use this information to identify you individually unless it is combined with information you have submitted to us directly.

3. Cookies and tracking technologies

Cookies are small text files placed on your device when you visit a website. We use the following types:

Strictly necessary cookies — Required for the Site to function (e.g., security and session handling). These cannot be disabled.

Analytics cookies — We may use a web analytics service (such as Google Analytics) to collect aggregated data about how visitors use the Site. This helps us understand which pages are most useful and where users drop off. Analytics data is processed by our analytics provider and may be transferred to servers outside Canada, including the United States. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

Functionality cookies — Used to remember your preferences (e.g., language, form data) to improve your experience.

You can manage cookies through your browser settings. Disabling cookies may affect some functionality of the Site. Analytics and advertising cookies are used only with your consent, which you can grant or decline through our cookie banner and change at any time. We do not enable non-essential cookies until you consent.

When advertising or remarketing cookies are switched on in the future, this cookie section will be expanded to name those cookies, their purpose, and any third parties involved (for example, Google Ads), so this Policy stays accurate at that time.

If we introduce a live chat or virtual assistant feature on the Site in the future, the chat provider may set strictly necessary and functional cookies and will receive the information you type into the chat. We will identify the provider in this policy at or before the time the feature is activated.

Why we collect your information (purposes)

We collect and use personal information for the following purposes:

1. To respond to your inquiry — reviewing and responding to freight quote requests, general questions, and contact form submissions.
2. To prepare and provide freight quotes — assessing your shipment requirements and generating accurate, relevant quotations.
3. To begin and manage onboarding — setting up your account in our systems and coordinating the logistics services you have requested.
4. To communicate with you — providing updates about your request, shipment, or service arrangement, and responding to follow-up questions.
5. To comply with legal obligations — retaining records as required under applicable commercial, tax, customs, and transportation law.
6. To improve the Site — using aggregated, anonymized analytics to understand usage patterns and make the Site more useful.
7. To send you relevant service information — where you have given us consent or where we have a legitimate interest in doing so (see CASL section below). You may withdraw consent at any time.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

Legal basis for collecting your information

Under PIPEDA and PIPA BC, we rely on the following legal bases:

• Your consent — provided when you submit a form or tick an opt-in checkbox. You may withdraw consent at any time (see "Your rights" below).
• Contractual necessity — where the information is needed to fulfill a request you have made (e.g., preparing a freight quote).
• Legal obligation — where retention or disclosure is required by law.
• Legitimate interests — for analytics, Site security, and limited follow-up communications on inquiries you have initiated, provided those interests are not overridden by your privacy rights.

How we share your information

We do not sell, rent, or trade your personal information. We share it only as described below.

Customs clearance — Where your request involves customs clearance, your information is handled in-house by RRA's own CBSA-licensed customs team, under the same accountable group. It is not shared with an outside broker for that purpose.

Service providers (processors) — We use trusted third-party providers to operate the Site and handle form submissions. These include our form platform provider, email delivery service, website hosting provider, and analytics provider. These parties process your information only on our instructions and are contractually required to protect it.

Professional advisors — We may share information with our lawyers, accountants, or insurers where necessary, under obligations of confidentiality.

Regulatory and legal requirements — We may disclose personal information where required or permitted by law, including to government bodies (such as the Canada Border Services Agency, Canada Revenue Agency, or Transport Canada), law enforcement, or courts, in response to a lawful demand.

Business transfers — If RRA Group Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring party, subject to equivalent privacy protections.

We do not share your information for third-party marketing purposes.

International transfers

Our service providers (including form platforms, email hosts, and analytics tools) may be located outside Canada, including in the United States. When we transfer personal information outside Canada, we take steps to ensure it receives a comparable level of protection — including through contractual terms — and we inform you of such transfers through this Policy. By submitting information to us, you acknowledge that it may be processed in other countries.

Retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by applicable law.

• Quote and onboarding inquiries: Retained for the duration of the business relationship and, after it ends, for as long as required to meet our legal and record-keeping obligations (typically 7 years for commercial and tax records).
• Contact-only inquiries: Retained until the inquiry is resolved and for a reasonable period thereafter, unless you have asked us to delete the information sooner.
• Analytics data: Retained in aggregated, anonymized form; identifiable technical data (such as IP addresses) is typically retained for no more than 26 months.

When personal information is no longer required, we delete or anonymize it securely.

Security

We apply reasonable and appropriate administrative, technical, and physical safeguards to protect the personal information we hold against unauthorized access, use, disclosure, alteration, or destruction. These safeguards include access controls, encrypted transmission (HTTPS), and working with reputable service providers who maintain their own security programs.

No transmission over the internet and no storage system can be guaranteed to be completely secure. If you have reason to believe your interaction with us is no longer secure, please notify us immediately using the contact details below.

In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

Commercial electronic messages (CASL)

Canada's Anti-Spam Legislation (CASL) governs commercial electronic messages sent from Canadian businesses. Where we send you commercial electronic messages (such as follow-ups, service updates, or industry information), we do so only where you have provided express consent, or where an existing business relationship or other CASL exemption applies. Every such message will include a clear and easy mechanism for you to unsubscribe at any time. Once you unsubscribe, we will process your request within 10 business days.

Your rights under PIPEDA and PIPA BC

As an individual whose personal information we hold, you have the right to:

• Access — Request a copy of the personal information we hold about you and an explanation of how it has been used and to whom it has been disclosed.
• Correction — Request that we correct inaccurate or incomplete personal information.
• Withdrawal of consent — Withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Note that withdrawing consent may affect our ability to provide services or respond to your inquiry.
• Deletion — In certain circumstances, request that we delete personal information we hold about you.
• Complaint — File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca, or with the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) at www.oipc.bc.ca.

To exercise any of these rights, please contact us using the details in the "Contact us" section below. We will respond within the timeframes required by applicable law (generally 30 days, with the possibility of one 30-day extension where necessary).

Children's privacy

This Site is intended for business use and is not directed to children under the age of majority. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us and we will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Site after changes are posted constitutes your acceptance of the updated Policy.

Contact us

For any privacy-related question, to exercise your rights, or to report a concern, contact:

RRA Group Inc. — Privacy Contact
8536 Richardson Drive
Surrey, BC V4N 5J1
Canada
Email: info@rragroup.ca
Phone: 1-888-316-8287

We will acknowledge your request promptly and respond within the timeframe required by applicable law.