UPIE ADDRESS · ADDRESS REQUESTS

Privacy policy

Draft updated October 18, 2026

This draft explains how Upie Address handles information submitted through the website and address request form. Mail-handling and identity-verification procedures will be provided at onboarding before service activation.

Who is responsible

Upie Address is a brand operated by Upie Vending Inc., which is responsible for personal information under its control. For privacy requests, email hello@upie.net, or describe your request in the form’s Notes field. You do not need to agree to marketing. Your request will be directed to the person responsible for privacy.

What we collect and why

The form requires your email and name. You may also provide a company name, service interests, city, and notes. We collect your consent choice, the consent disclosure version, submission time, and selected language. We use this information to respond to your request, explain your address and onboarding steps, and understand service needs. Marketing and service-update emails are sent only if you opt in.

No payment is taken through this site. Please do not submit ID documents, payment details, or mail contents. Identity verification will use a separate process explained at onboarding.

Hosting and form providers may process IP addresses, request logs, and technical information for delivery, security, and abuse prevention. This site has no advertising trackers or analytics scripts. Your language preference is stored in your browser’s localStorage and is included if you submit the form.

Choice and consent

The marketing checkbox is optional and unchecked by default. We will email you about your request whether or not you check it. Leaving it unchecked does not prevent an address request, and you do not have to add a note. It does not subscribe you to marketing or service-update emails.

To withdraw marketing consent, use the unsubscribe method included in our emails, email hello@upie.net, or use the form. Withdrawal does not affect lawful prior processing or records we must retain. We do not sell personal information.

Service providers and cross-border processing

Our intended providers are Cloudflare for hosting, storing submissions (Cloudflare D1), and sending notification emails. We share only information needed for their functions, subject to appropriate agreements and safeguards. Providers may process or store information outside Canada, where local laws and lawful access requests may apply. The actual provider setup must be confirmed before collection begins.

Retention

We keep request information only as long as needed to respond, complete onboarding, and meet applicable obligations. Our proposed schedule is to review request records every six months and delete or anonymize inactive requests within 12 months of the last meaningful contact, unless you become a customer or another lawful purpose applies. Minimal consent and suppression records are kept to honour unsubscribe requests. Final retention and provider deletion procedures will be confirmed before collection begins.

Safeguards and mail handling

We plan to use encrypted connections, limited staff access, account access controls, and secure deletion procedures appropriate to the information. No system is risk-free. We will assess incidents and give notifications where required by law. Staff will only open mail on your request. The policy provided before activation will address ID verification, envelope images, scans, physical storage, access, and disposal.

Access, correction, and complaints

To request access or correction, withdraw consent, or raise a concern, email hello@upie.net or use the form’s Notes field. We may need to verify your identity through an appropriate secure process. Access rights have limited legal exceptions; we will explain any applicable restriction or permitted fee and respond within applicable legal time limits.

If a concern is unresolved, you may contact the Office of the Privacy Commissioner of Canada.

Changes

We will post a revised policy and date when practices change and seek fresh consent where required for new purposes. Service-specific privacy terms will be provided at onboarding.