PRIVACY POLICY

Last updated: July [*], 2026

British Columbia Automobile Association and our corporate affiliates (“BCAA”, “we”, “us”, or “our”) respect and uphold individual rights to privacy and the protection of personal information while balancing such rights with our need to process your personal information to manage our business and deliver our services to you. For clarity, our corporate affiliates that may process your personal information pursuant to this Privacy Policy include B.C.A.A. Holdings Ltd. and BCAA Insurance Corporation.

This Privacy Policy (the “Policy”) describes how we may collect, use, disclose, retain, dispose of and otherwise process (collectively, “process”), and how you may correct, update and access, your personal information that you provide as a user of, or that we collect through your use of, our websites, social media sites, mobile applications, products, services, software and tools (collectively, the “Services”), as well as through in-person and telephone exchanges. It does not apply to our employees’ personal information (except to the extent that they are users of Services in their personal capacity), business contact information, anonymized information or other information exempted from applicable privacy laws. For clarity, any reference to the “Services” includes a reference to any part or aspect of the Services.

Unless otherwise provided in an applicable Privacy Notice, this Policy references the BCAA Terms of Service and forms an integral part thereof. In the event of a conflict between the BCAA Privacy Policy and the Terms of Service, the Terms of Service will prevail.

PLEASE READ THIS POLICY CAREFULLY. By using our Services, or otherwise by choosing to provide us with your personal information, you acknowledge and consent to us processing your personal information in accordance with this Policy and as may be further identified when the personal information is collected. If you do not consent to the processing of your personal information in accordance with this Policy, please do not access or continue to use any of our Services or otherwise provide any personal information to us.

PLEASE NOTE, depending on how you interact or engage with us, including which of our Services you use, additional Privacy Notices may apply to those Services. The following additional Privacy Notices apply to and provide additional information about some of our Services:

BCAA Privacy Notice
Evo Privacy Notice
Evolve Privacy Notice
BCAA Auto Marketplace Privacy Notice
BCAA Task Marketplace Privacy Notice

BCAA Connect Privacy Notice
Evo Affiliate Program Privacy Notice

1. Accountability

BCAA is responsible for your personal information under its control. We have appointed a Chief Privacy Officer who is accountable for BCAA's compliance with this Policy. The Chief Privacy Officer can be contacted at privacy@bcaa.com.

2. Personal Information

For the purposes of this Policy, “personal information” means any information about an identifiable individual or any information that can be used, either alone or in combination with other information, to identify an individual (for example, an individual’s name, mailing address, telephone number and email address), but excludes any information that is exempted by applicable privacy laws. For example, in Canada, personal information generally does not include any business contact information that is processed solely to communicate with that person about their employment or profession.

The types of information we receive and collect, and how we use or disclose that information, depends on how you interact with us, which of our Services you use, and how you use them. Certain of our Services have optional features which, if used, require us to collect additional information to provide such features. You will be notified of such collection, as appropriate. If you choose not to provide the information needed to use a feature, you will be unable to use the feature.

Directly Collected Personal Information

When you use our Services, we may collect the following personal information from you:

Contact information, such as first and last name, email address, mailing address and phone number;
Payment information, such as billing address and credit card information;
Unique identifiers, such as username, account number and password;
Identification, such as government issued identification documents and current photograph; and
Any other information you voluntarily provide through our Services.

Your personal information may be collected when:

You register for an account with one or more of our Services;
You submit an application for membership for one or more of our Services;
You make purchases through one or more of our Services;
You fill out free-form fields on our websites;
You connect with us through social media;
You connect with us through Customer Support channels;
You submit a job application to work for BCAA;
You communicate with us by phone, email, SMS or other direct messaging services; and
You otherwise use our Services.

We only collect personal information that we need. We encourage you to not provide us with any personal information beyond what is necessary and as requested by us.

Automatically Collected Personal Information

We, and our third-party partners, may also automatically collect information about you and any computer or device you use to access our Services, read our emails or otherwise engage with us. Some of the information we may collect, and ways we may collect it include:

Cookies. When you visit or use our websites, we may send one or more cookies – small text files containing a string of alphanumeric characters – to your computer or device that allows us to uniquely identify your browser, computer or device. Cookies allow us to collect standard Internet log information about how and when you access and use our websites, including your IP address, unique device identifiers, location data, weblogs, time zone, date, your language preferences, browser settings and browsers used, web addresses visited, links clicked, other communication data, searches conducted and pages visited. We use cookies for a number of purposes, including to: ensure our websites are optimized for your use and for future communications between you and us; track your preferences you specify while using our websites; assist us to maintain and manage your status as logged in or logged out while you are using our websites; estimate and report our total audience size and traffic; and conduct research to improve our content, products and services. We may also use cookies and other technologies in online advertising campaigns to track responses to our ads. You can manage cookie preferences in your browser’s settings, but please note that if you refuse to ‎allow cookies, you may not be able to use certain features or functionality of our websites.
Log Files. We may record log file information each time you access our websites. This information may include information such as: your IP address; browser type; unique device identifiers; information about your computer or device; number of clicks; how you interact with links, features or functionality on our websites; and other such information.
Usage Data. We may also collect information about the way you use our Services. For example, the site from which you came and the site to which you are going when you leave our websites, the pages you visit, the links you click on, how frequently you access our websites, whether you open emails or click the links contained in emails, whether you access our websites from multiple devices, last login time, and other actions you take on our websites. We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for our websites.
• Google Analytics. We use Google Analytics to help us analyze how visitors use our website. Google Analytics uses ‎cookies and similar technologies to collect and analyze information about use of our Services and to ‎report on activities and trends. Google Analytics may also collect information regarding the use of ‎other websites, apps and online resources. You can learn about Google’s practices by going to ‎http://www.google.com/policies/privacy/partners‎, and opt out by downloading the Google Analytics ‎opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout.‎

Collection from Third Parties

We do not knowingly collect your personal information from a third party, unless you consent or we are otherwise exempted, authorized or required by applicable laws to do so. For example, we may collect your personal information from third parties as follows:

Your authorized representative(s);
Organization(s) that you previously provided consent to in respect of their collection of your personal information; or
Public sources in which your personal information is publicly available.

If we collect your personal information from a third party, we will only process that information for the specific purpose for which it was provided to us in accordance with this Policy (and an applicable Privacy Notice) and the policy under which that information was collected.

Communication between users

Certain of our Services may facilitate communication between users but we do not assume responsibility ‎for the use of content or information exchanged during these interactions. We encourage you to exercise ‎caution when disclosing information to other users. You are solely responsible for the personal ‎information you share through our Services and we do not guarantee the privacy or security of the ‎information you share with other users.

Links to Other Sites

Our websites may contain links to other websites, applications or Internet resources (“Third-Party Services”) which are provided or made available solely for your convenience and information. When you click on one of those links you are contacting those Third-Party Services. We do not endorse and have no responsibility or liability for, nor do we have any control over, those Third-Party Services, their content or their processing of your personal information. We encourage you to read the privacy policies of those Third-Party Services to learn how they process your personal information.

Information about Children

We understand the importance of protecting children’s privacy. Our Services are not directed at children under the age of 13 and we do not knowingly collect personal information from children under the age of 13 without parental consent, except as permitted by applicable law.

We may collect personal information about children under the age of 13 from their parent or legal guardian. By providing such information, you confirm that you are the parent or legal guardian of any such children. If you register any children under the age of 13 on your BCAA membership, you are hereby deemed to consent to our use, collection and disclosure of such children’s personal information strictly for the purposes of providing Services.

If you believe that a child under the age of 13 has provided us with personal information without parental consent, please contact us at the address indicated in Section 12 below and we will work to delete that data from our systems.

3. Purpose for Which Personal Information is Processed

Generally, we may process your personal information for the following purposes:

To verify and authenticate your identity;
To contact you for mailing and renewal purposes;
To operate, maintain and provide to you the Services and all features and functionality of our websites and mobile applications;
To contact you with respect to your purchases or transactions;
To deliver products and fulfill requests;
To maintain accurate records;
To ensure that the Services are optimized for your use and benefit;
To analyze user experience and improve the Services;
To provide you with requested information, process your questions and/or answer your queries;
To communicate with you to provide you with information about us (including news releases, newsletters and notices regarding upcoming promotions or events);
To solicit feedback from you about your satisfaction and experience with our Services (including through occasional surveys);
To communicate with you to provide you services, contacts, materials and/or recommendations for your needs as identified by you through phone, email or our websites;
To carry out our obligations arising from any contracts or transactions entered into between you and us;
To comply with internal policies and procedures, applicable laws, regulations, subpoenas, court orders and other legal, accounting or security requirements;
To protect us, yourself and others from fraud and error, and to safeguard our business interests;
To collect debts owed to us;
To manage or transfer our assets or liabilities (for example, in the case of an acquisition or merger, the provision of security for a credit facility or the change of a supplier of products or services); and
To share your personal information with our employees, contractors, consultants and other third party service providers including, but not limited, to website hosting providers, advertising agencies, payment processors or customer service agencies (“Service Providers”) who require this information to assist us with establishing, maintaining and managing our relationship with you and optimizing and providing the Services for your use and benefit. Please note that we may change or add Service Providers at any time, in our sole discretion, either in Canada or elsewhere. We encourage you to reference this Policy (and any Privacy Notices applicable to the Services you are using) from time-to-time to obtain updated information.

We will not process your personal information for other purposes without your consent, except where authorized or required by law.

4. Disclosure of Your Personal Information

We will not share your personal information with any third party, except as indicated in this Policy (or an applicable Privacy Notice) or as authorized or required by law.

We may disclose your personal information for the purposes as described in this Policy (and any applicable Privacy Notices) in the following ways:

To our employees, contractors and agents on an as-needed basis;To our affiliates and business partners;
To our Service Providers (as discussed above);
To law enforcement, government or regulatory bodies, or other lawful authorities, as strictly required by law; and
To third parties, in accordance with applicable law, in connection with a corporate reorganization, a merger or amalgamation with another entity, or a sale of all or a substantial portion of our assets or securities, provided that the disclosed information continues to be used solely for the purposes permitted by this Policy (and any applicable Privacy Notices) by the entity acquiring the information.

Our Service Providers, may be located outside of Canada, and you acknowledge that personal information may be processed and stored in foreign jurisdictions with different privacy laws, and that the governments, courts or law enforcement or regulatory agencies in those jurisdictions may be able to obtain disclosure of that personal information through the laws of the foreign jurisdiction.

5. Artificial Intelligence and Related Technologies

We may use artificial intelligence, machine learning and similar technologies (“AI Technologies”), including AI Technologies provided by third parties, in our business operations and the provision of our Services. Your personal information that we collect, use and disclose as part of rendering our Services may be processed using AI Technologies or otherwise to AI Technologies. Legal Basis for Processing Your Personal Information

We will process your personal information only with your knowledge and consent, except where exempted, authorized or required by applicable laws. The form of consent may vary depending on the circumstances and the type of information being requested. Your consent may be express, with clear options to say “yes” or “no” (such as by being asked to check a box to indicate your consent), or implied (such as when you provide us with your address through a form or email seeking information and we use those means to respond to your request). Your consent can also be provided by your authorized representative. Taking into account the sensitivity of your personal information, purposes of collection, and your reasonable expectations, we will obtain the form of consent that is appropriate to the personal information being processed.

When we process your personal information for a new purpose, we will document that new purpose and ask for your consent again.

You may refuse to provide consent or may notify us at any time that you wish to withdraw or change your consent to the processing of your personal information without penalty, subject to legal, contractual or other restrictions and reasonable notice, by opting out of the use of your personal information by contacting our Chief Privacy Officer (see Section 12 below). However, if you withdraw or change your consent, we may not be able to provide you with the Services.

Aside from consent, we may also process your personal information under other legal bases, as permitted by applicable laws.

6. Legal Basis for Processing Your Personal Information

When we process your personal information for a new purpose, we will document that new purpose and ask for your consent again.

Aside from consent, we may also process your personal information under other legal bases, as permitted by applicable laws.

7. Security of Personal Information

The security of your personal information is important to us. We protect the personal information in our custody or under our control using reasonable physical, technological and organizational safeguards designed to prevent unauthorized access, collection, use, disclosure, copying, modification, destruction or similar risks.

We will take reasonable measures, through contractual or other reasonable means, to ensure that our Service Providers implement a comparable level of protection. Each of our employees is responsible for maintaining the confidentiality of all personal information to which they have access. We keep our employees informed about our policies and procedures for protecting personal information.

However, no method of transmission over the Internet, or method of electronic storage, is completely secure. As such, despite our safeguards and protocols, we cannot fully guarantee the security of your personal information and you should always exercise caution when disclosing personal information over the Internet.

8. Privacy Rights and Choices

Accessing Your Personal Information

You have a right to access your personal information that we hold.

Upon your written request, we will provide you your personal information in our possession or under our control, information about the ways in which that information is being used, and a description of the individuals or organizations to whom that information has been disclosed. We may charge you a minimal fee for doing so, in accordance with applicable law.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who does not have a right to receive it.

Access may be declined where authorized or required by applicable law. If access cannot be provided, we will notify the individual making the request within 30 days, in writing, of the reasons for the refusal.

We will make our policies and practices relating to the management of your personal information readily available to you, if requested.

Correcting Your Personal Information

We will make a reasonable effort to ensure that personal information we are using or disclosing is accurate, complete and up-to-date and reasonably necessary for the purposes for which it is to be used.

If you demonstrate the inaccuracy or incompleteness of personal information, we will amend the information as required. If appropriate, we will send the amended information to third parties to whom the information has been disclosed.

If a challenge regarding the accuracy of personal information is not resolved to your satisfaction, we will annotate the personal information in our possession or under our control with a note that the correction was requested but not made.

9. Retention of Your Personal Information

We will delete, destroy, erase, aggregate or make anonymous documents or other records containing personal information as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the information and retention is no longer required for a legal or business purpose.

We will keep personal information used to make a decision affecting you for at least one year after using it to make the decision.

10. CASL Policy

We are committed to compliance with Canada’s Anti-Spam Legislation (“CASL”). Any electronic ‎communication we send to outside parties is protected by a range of business procedures, processes ‎and policies to ensure that such communication is done in compliance with CASL. In our electronic ‎communications with outside parties, we comply with the rules established by CASL and enforced by ‎various Canadian authorities including the Canadian Radio-television and Telecommunications ‎Commission. CASL regulates, and our policies generally apply to, each commercial electronic message ‎‎(a “CEM”) that we send. A CEM is an electronic message sent to an electronic address that, among its ‎purposes, encourages participation in a commercial activity.‎

In addition to adopting and updating this Policy, we undertake various transparency initiatives to ensure ‎we comply with CASL, which include:‎

Consent. We do not send you CEMs without your consent. This consent typically must be “express” ‎‎(i.e. expressly acknowledged by you), but in certain circumstances can be “implied”. In other ‎limited circumstances, consent is not required. We have modified or adopted our sign-up, ‎registration and consent forms in order to ensure that your consent is meaningful (i.e. informed ‎and freely given) as required by CASL. When we collect your electronic contact information, you ‎will know the exact purposes behind the collection.‎
Content. We have adopted processes to ensure that our CEMs contain the following requirements ‎prescribed under CASL, which will usually be in the footer of the CEM. We will:‎

identify ourselves as the party sending the CEM, and whether we are sending the message ‎on our own behalf or on behalf of someone else;
provide you with our contact information; and
set out a clear, working unsubscribe mechanism or preference centre that is easy to use, ‎automatic, and at no cost to you (other than your own cost of connecting to the Internet).‎

Clarity. We ensure that each aspect of a CEM (including its header, content, or any links or URLs in ‎the CEM) conveys the appropriate information, whether viewed individually or taken as a whole, ‎so that you always know what you are clicking on.‎

If you receive a CEM from us but believe that you should not have or no longer wish to receive CEMs, ‎we will aim to respect your preferences in a timely manner once you update them through our ‎unsubscribe mechanism. CASL requires us to process unsubscribe requests within 10 business days. If ‎you have any questions or concerns about our unsubscribe mechanisms, you may contact using the ‎contact information provided in Section 12 below.

11. Updates or Changes to this Policy

This Policy was last updated as of the “Last updated” date set out at the beginning of this Policy.

We may update this Policy and any other Privacy Notices time to time to ensure ongoing compliance with applicable laws and for any other purpose that we deem reasonably necessary. We therefore encourage you to periodically review this Policy and any additional Privacy Notices that might apply to your use of our Services to ensure you are aware of any changes.

If we make any changes to this Policy or any other Privacy Notice that materially affects how we process personal information we have previously collected from you, we will endeavour to notify you (such as by emailing you (at the email address listed in our records) or providing a notice on our websites or through our mobile applications, as applicable) before the change becomes effective. Any change to this Policy or any other Privacy Notice will apply to existing information, as well as information collected after the date that this Policy or the applicable Privacy Notice is posted or on the date as specified in the notification.

Your continued use of the Services following the effective date of any changes to this Policy or any other Privacy Notice signifies your acceptance of such changes.

12. Contact Information for Chief Privacy Officer

If you have any questions or concerns regarding our compliance with this Policy and our processing of your personal information, you may contact our Chief Privacy Officer at privacy@bcaa.com.
If you are not satisfied with our Chief Privacy Officer’s response to your question or concern, you may be able to file a complaint under applicable privacy laws. Our Chief Privacy Officer will provide you with the contact information to do so if requested.

13. California Residents

If you are a California resident, do not enter your personal information through this site or other electronic means. You may inquire about our services through our call centre at 1.888.268.2222.
BCAA does not sell or rent any personal information.

BCAA PRIVACY NOTICE

In addition to the BCAA Privacy Policy, this Privacy Notice also applies to users of BCAA’s Services, and users of or visitors to BCAA’s website operated at www.bcaa.com and other locations from time to time, social media sites and mobile applications (collectively, the “Site”), physical service locations (including BCAA Auto Service Centres), and telephone communications. Terms used but not defined in this Privacy Notice have the meanings given to them in the BCAA Privacy Policy.

Information we collect

When you use the Site, or the Services we provide through the Site, or interact with us via telephone or in person, we may collect the following additional information:

Your driver’s license and driving record;
Your vehicle information;
Information obtained during the course of dispatching a service vehicle, including the type of service required and the tow destination;
Information related to insurance, including driving records, medical history, claims history, information on dependents, insured residence particulars or next of kin particular;
Your travel needs, including such items as travel arrangements and medical or dietary restrictions for travelers;
Your payment information;
Your credit information and other information obtained through credit checks performed by us;
Information that is linked to your BCAA account; and
Your products and services history at BCAA.

Your personal information may be collected when:

you submit an on-line application for membership or purchase of insurance through the Site; and
when you interact with us in-person or communicate with us by telephone.

We may collect information from the following third-party sources, provided you have consented to such collection, or we are otherwise exempted, required or permitted by applicable law to do so:

the Canadian Automobile Association (“CAA”), of which BCAA is a member, and the American Automobile Association (“AAA”), with which BCAA is affiliated (with respect to members requiring products, services or insurance coverage in other jurisdictions);
underwriters, agents, brokers and reinsurers, as appropriate (with respect to insurance coverage or claims);
other insurers or credit reporting agencies, as appropriate given the product or service in question (with respect to driving records and credit information); and
lawyers, private investigators, the General Insurance OmbudService and other third parties (with respect to investigating, evaluating and adjusting claims).

Additional purposes for which personal information is processed

We may process your personal information for the following additional purposes:

To provide you with the products and services requested;
To contact you for mailing and renewal purposes;
To contact you to advise you of any existing services and benefits that may be of interest to you, including via direct marketing, in accordance with applicable anti-spam laws;
To promote products and services of member companies of BCAA;
To coordinate and liaise with other CAA and AAA clubs as is appropriate in the circumstances;
To meet legal or statutory requirements or obligations to investigate fraud or other potential criminal activity;
To ensure coordination of dispatch for members needing assistance by the use of external services such as Google Maps Coordinates Software;
To process, investigate and administer claims and assessments of losses in the event of a claim;
To allow the establishment of the risk premium associated with an insurance policy;
To underwrite and price your policy application and any subsequent policy changes or renewals; and
To analyze business results, compile statistics, perform administrative tasks such as accounting and information system activities, and conduct marketing activities and underwriting research and modeling;
To develop personalized experiences and services and proactively offer those experiences and services to you;
To train our agents, including virtual agents, and for compliance purposes; and
To protect the personal safety of our employees, our client or third parties.

EVO PRIVACY NOTICE

In addition to the BCAA Privacy Policy, this Privacy Notice also applies to members (and applicants for membership) of the Evo Car-Sharing Program operated by B.C.A.A Holdings Ltd., which is a subsidiary of British Columbia Automobile Association.

For greater certainty, where Evolve services are accessed, administered or supported through shared accounts, applications, systems or member relationships with Evo services, personal information may be processed across those services for the purposes described in the BCAA Privacy Policy and this Privacy Notice.

The BCAA Privacy Policy and this Privacy Notice reference the Evo Member Agreement and form an integral part thereof. In the event of a conflict between the BCAA Privacy Policy or this Privacy Notice and the Evo Member Agreement, the Evo Member Agreement will prevail. Terms used but not defined in this Privacy Notice have the meanings given to them in the BCAA Privacy Policy or the Evo Member Agreement, as applicable and the context requires.

Accountability
We are responsible for your personal information under our control. Our Privacy Officer is accountable for our compliance with this Privacy Notice and the BCAA Privacy Policy as it relates to the Evo Car-Sharing Program. The Evo Privacy Officer can be contacted at privacy@evo.ca.

Additional information we collect
As part of your application for and during your Evo membership, we may, from time to time, collect the following additional personal information directly from you, indirectly through your use of our Services that are associated with Evo Car-Sharing Program (including the website located at evo.ca, our Evo mobile applications and our Evo social media sites) (“Evo Services”), or from third-party sources as described below:

A photo of you and you Driver’s Licence (including your Driver’s Licence number
A driver’s abstract, including your driving record, driving history and personal background;
Information about your vehicle usage, including, without limitation, information generated by or collected from a Vehicle or related telematics systems, such as GPS location, trip history, speed, braking and acceleration patterns, mileage, fuel or charge levels, diagnostic data, and date and time information associated with your Rental Period; and
Information about your driving behaviour, such as traffic tickets issued to you, toll tickets, parking tickets, speeding tickets, etc.

We may collect information from the following third-party sources, provided you have consented to such collection or we are otherwise exempted, required or permitted by applicable law to do so:

government agencies (with respect to driving abstracts, driving record, driving history, and traffic and parking tickets and other driving infractions and traffic violations);
credit-rating agencies (with respect to credit information and history); and
the organization managing the business account through which you are accessing and/or using our Services (such as your employer).

Additional purposes for which personal information is processed

We may process your personal information for the following additional purposes:

To process an Evo membership application;
To verify or process your credit or debit card payments;
To investigate your driving record and personal background
To follow up on traffic or parking tickets;
To administer insurance claims;
To help understand the driving habits and present and future transportation needs of Evo members;
To investigate incidents, accidents, complaints, Vehicle Damage, or misuse
To administer, operate, maintain and secure our Vehicle fleet;
To determine your continued eligibility for Evo membership and participation in the Evo Car-Sharing Program;
To process requests you make to use the Evo Car-Sharing Program;
To communicate to you any benefit, feature, service or other information about your Evo membership and the Evo Car-Sharing Program;
To promote Evo-related products or services, as well as the products or services of our affiliates;
To help ensure member and public safety;
To administer billing, fees, and dispute resolution and enforce our membership terms;
To help us better manage the Evo Car-Sharing Program and your relationship with us; and
To send, deliver or display advertising to you via digital channels (including on-line and email) to the extent permitted by law.

Additional ways we share your personal information

We may also disclose your personal information for the purposes described in the BCAA Privacy Policy and this Privacy Notice to your Organization (defined below) as the administrator of the business account through which you are accessing and/or using our Services in order to manage our relationship with your Organization.

California Residents

If you are a California resident, do not enter your personal information through the evo.ca website or other electronic means. You may inquire about our Evo Services through our call centre at 1-844-EVO-2EVO.

BCAA does not sell or rent any personal information.

Questions or Complaints

Please direct any questions or complaints regarding our processing of your personal information related to Evo Services to our Privacy Officer at privacy@evo.ca.

Evo Business Accounts

If you are participating in the Evo Car-Sharing Program as a driver registered on your employer’s or organization’s (your “Organization”) Evo Business Membership account (a “Business Driver”), you acknowledge and agree to the following:

We may also process your personal information in accordance with the BCAA Privacy Policy and this Privacy Notice in relation to your use of Evo Services as a Business Driver (including to process your Business Driver application and to make Evo Services available to you as a Business Driver).
We may also share your personal information with your Organization in accordance with the BCAA Privacy Policy and this Privacy Notice, and for the following additional purposes:

to inform your Organization of your acceptance, suspension or termination as a Business Driver;
to provide your Organization with information regarding your use of the Evo Services as a Business Driver, including, but not limited to, information with respect to fees incurred, trip and usage details, and accident details;
to help us process you Business Driver application and determine your continued eligibility for participation in the Evo Car-Sharing Program (for example, we may need to disclose your personal information to confirm your employment details with your Organization);
to allow us to effectively administer the Evo Services;
to administer your Organization’s Evo Business Membership (including, but not limited to, the disclosure by us to your Organization of any violations or potential violations by you of the Evo Member Agreement); and
to communicate with your Organization in order to improve and promote our Evo Services (for example, we may use or disclose to your Organization your personal information in order to evaluate the performance of our employees in providing the Evo Services).

EVOLVE PRIVACY NOTICE

In addition to the BCAA Privacy Policy, this Privacy Notice also applies to members (and applicants for membership) of the Evolve Device-Sharing Program operated by B.C.A.A Holdings Ltd., which is a subsidiary of British Columbia Automobile Association.

For greater certainty, where Evo services are accessed, administered or supported through shared accounts, applications, systems or member relationships with Evolve services, personal information may be processed across those services for the purposes described in the BCAA Privacy Policy and this Privacy Notice.

The BCAA Privacy Policy and this Privacy Notice reference the Evolve Member Agreement and form an integral part thereof. In the event of a conflict between the BCAA Privacy Policy or this Privacy Notice and the Evolve Member Agreement, the Evolve Member Agreement will prevail. Terms used but not defined in this Privacy Notice have the meanings given to them in the BCAA Privacy Policy or the Evolve Member Agreement, as applicable and the context requires.

Accountability

We are responsible for your personal information under our control. Our Privacy Officer is accountable for our compliance with this Privacy Notice and the BCAA Privacy Policy as it relates to the Evolve Device-Sharing Program. The Evolve Privacy Officer can be contacted at privacy@evo.ca.

Additional information we collect

As part of your application for and during your Evolve membership, we may, from time to time, collect the following additional personal information directly from you, indirectly through your use of our Services that are associated with Evolve Device-Sharing Program (including the website located at www.evo.ca/evolve, our Evo mobile applications and our Evo social media sites), or from third-party sources as described below:

Information about your Evolve Device usage; and
Information about your driving behaviour, such as traffic tickets issued to you, parking tickets, speeding tickets, etc.

We may collect information from the following third-party sources, provided you have consented to such collection or we are otherwise exempted, required or permitted by applicable law to do so:

government agencies (with respect to driving abstracts, driving record, driving history, and traffic and parking tickets and other driving infractions and traffic violations); and
credit-rating agencies (with respect to credit information and history).

Additional purposes for which personal information is processed

We may process your personal information for the following additional purposes:

To process an Evolve membership application;
To verify or process your credit or debit card payments;
To investigate your driving record and personal background;
To follow up on traffic or parking tickets;
To administer insurance claims;
To help understand the driving habits and present and future transportation needs of Evolve members;
To determine your continued eligibility for Evolve membership and participation in the Evolve Device-Sharing Program;
To process requests you make to use the Evolve Device-Sharing Program;
To communicate to you any benefit, feature, service or other information about your Evolve membership and the Evolve Device-Sharing Program;
To promote Evolve-related products or services, as well as the products or services of our affiliates;
To help us better manage the Evolve Device-Sharing Program and your relationship with us;
To help deliver private scheme Evolve Device-Sharing services; and
To send, deliver or display advertising to you via digital channels (including on-line and email) to the extent permitted by law.

California Residents

If you are a California resident, do not enter your personal information through the evo.ca website or other electronic means. You may inquire about our Evolve Device-Sharing services through our call center at 1-844-EVO-2EVO.

BCAA does not sell or rent any personal information.

Questions or Complaints

Please direct any questions or complaints regarding our processing of your personal information related to Evolve Services to our Privacy Officer at privacy@evo.ca.

Evolve Business Accounts

If you participate in the Evolve Program as a rider registered on your employer’s or organization’s (your “Organization”) Evolve business account (a “Business Rider”), we may also process your personal information in accordance with this Privacy Policy in relation to your use of the Evolve Program as a Business Rider, including to process your Business Rider application and to make the Evolve Program available to you as a Business Rider.

We may also share your personal information with your Organization in accordance with this Privacy Policy for the following additional purposes:

to inform your Organization of your acceptance, suspension or termination as a Business Rider;
to provide your Organization with information regarding your use of the Evolve Program as a Business Rider, including information with respect to fees incurred, trip and Evolve Device usage details, and accident details;
to help us process your Business Rider application and determine your continued eligibility for participation in the Evolve Program, including by confirming your employment details with your Organization;
to allow us to effectively administer the Evolve Program
to administer your Organization’s Evolve business account, including disclosure to your Organization of any violations or potential violations by you of the Evolve Member Agreement; and
to communicate with your Organization in order to improve and promote the Evolve Program and related services, including using or disclosing your personal information to evaluate the performance of our employees in providing the Evolve Program and related services.

BCAA AUTO MARKETPLACE PRIVACY NOTICE

Current as of November 24, 2025

BRITISH COLUMBIA AUTOMOBILE ASSOCIATION PRIVACY POLICY

A. Introduction and Scope of Privacy Policy

This Privacy Policy explains how the British Columbia Automobile Association and its member companies identified below (together referred to as “BCAA” in this Policy) collect, use and disclose personal information through the BCAA website, social media sites and mobile apps (the “Site”) as well as through in-person and telephone exchanges.

By using the Site and otherwise providing BCAA with your personal information you consent to the collection, use and disclosure of your personal information as described in this Privacy Policy. BCAA may amend this Privacy Policy from time to time. The date at the top of the Privacy Policy is the date it was last updated and you are encouraged to review the Privacy Policy from time to time in order to ensure that you continue to agree to have your personal information collected, used and disclosed in accordance with the current terms.

BCAA’s member companies (which are included in the term “BCAA” in this Policy) means:

British Columbia Automobile Association (BCAA);
B.C.A.A. Holdings Ltd.;
BCAA Travel Agency
B.C.A.A. Associated Services Ltd.;
BCAA Insurance Corporation;
BCAA Insurance Agency Ltd. (formerly known as Pacific Sunspots Tours Inc.)
BCAA Traffic Safety Foundation.

You can choose not to provide BCAA with some or all of your personal information. However, this choice may prevent BCAA from providing you with the products, services, or information requested or offered

B. What is Personal Information?

This Policy applies to “personal information” meaning information about an identifiable individual, other than his or her business contact information. The personal information that BCAA collects, uses and discloses will depend on the purpose being fulfilled. Generally BCAA collects, uses and discloses the following:

personal contact information including your name, address, phone number and email address;

drivers’ license and driving record;

·vehicle information;

information obtained during the course of dispatching a service vehicle including the type of service required and the tow destination;

information related to insurance including driving records, medical history, claims history, information on dependents, insured residence particulars or next of kin particulars;

travel needs, including such items as travel arrangements and medical or dietary restrictions for travelers;

payment information;

credit information in order to permit BCAA to perform credit checks;

technical information about you such as your IP address, browser type, addresses of referring websites and your browsing history in the Site;

information that is linked to your BCAA account;

products and services history at BCAA; and

publicly available information.

Personal information does not include information that is in the aggregate and from which you cannot reasonably be identified.

C. Accountability

BCAA is responsible for your personal information under its control. We have appointed a Chief Privacy Officer who is accountable for BCAA's compliance with this Privacy Policy. The Chief Privacy Officer can be contacted at privacy@bcaa.com.

D. Collection, Use and Disclosure of Personal Information

How Does BCAA Collect Personal Information?

Usually, we collect personal information directly from you through application forms, surveys, online registration, over the phone, use of the Site or at the counter in any of BCAA's offices.

If appropriate we obtain personal information from third-party sources. For example:

BCAA is a member of the Canadian Automobile Association (CAA) and affiliated with the American Automobile Association (AAA) and will collect personal information from those other clubs in relation to members requiring products, services or insurance coverage in other jurisdictions;

In relation to insurance BCAA will exchange personal information with underwriters, agents, brokers and reinsurers as appropriate;

Driving records and credit information may be obtained from third-party sources such as other insurers or credit reporting agencies, as appropriate given the product or service;

Personal Information may be obtained from lawyers, private investigators and other third parties when we are investigating, evaluating and adjusting claims.

Why Does BCAA Collect, Use and Disclose Personal Information?

Generally, BCAA collects, uses and discloses personal information for the following purposes:

to provide you with the products and services requested;

to contact you for mailing and renewal purposes;

to contact you to advise you of any existing services and benefits that may be of interest to you, including via direct marketing, provided BCAA is able to communicate with you for that purpose given the anti-spam laws that apply to BCAA;

to promote products and services with the member companies of BCAA;

to coordinate and liaise with other CAA and AAA clubs as is appropriate in the circumstances;

to meet legal or statutory requirements or obligations to investigate fraud or other potential criminal activity;

to enable third party service providers to provide specialized services (in which case we ensure through contractual protection that they will protect your personal information);

to ensure coordination of dispatch for members needing assistance by the use of external services such as Google Maps Coordinates Software;

to process, investigate and administer claims and assessments of losses in the event of a claim;

to allow the establishment of the risk premium associated with an insurance policy;

to underwrite and price your policy application and any subsequent policy changes or renewals;

to comply with laws, regulations, subpoena or court order;

to analyze business results, compile statistics, perform administrative tasks such as accounting and information system activities and conduct marketing and underwriting research and modeling;

to develop personalized experiences and services and proactively offer those experiences and services to you;

to train our agents, including virtual agents, and for compliance purposes;

to generate call summaries and assist our agents by using tools that analyze customer service calls for purposes such as note-taking, quality assurance, and enhancing service delivery;

to protect the personal safety of our employees, our clients or third parties; and

to fulfill any other purpose permitted by the law that applies to BCAA.

An Example of BCAA's Collection, Use and Disclosure of Personal Information

If you obtain travel:

BCAA and its providers need your personal information (including credit card information) to process and confirm your travel reservation;

your personal information has to be disclosed to hotel, airline, rental car and/or other travel suppliers whose products you have purchased;

BCAA will share the information with travel suppliers to confirm your reservation and travel preferences, similar to other travel agencies;

Travel suppliers may also contact you directly as necessary to obtain additional information about your confirmed reservation.

How and When is Consent Obtained to Collect, Use and Disclose Personal Information?

Your knowledge and consent are required for the collection, use or disclosure of your personal information unless such consent is not required given the applicable law.

While you may provide express consent in some circumstances, you should also understand that use of the Site or providing BCAA with your personal information through any channel of communication constitutes your consent to the collection, use and disclosure of your personal information as described in this Privacy Policy.

Except as set out in this policy, or as required or permitted by applicable law, BCAA does not sell or disclose any of your personal information to any other organization. BCAA is allowed by law to disclose your personal information without consent in certain circumstances including:

where disclosure is in your interests but we cannot obtain your consent in a timely way;
where disclosure is necessary to collect a debt;
where the disclosure is to a public body or law enforcement agency in Canada concerning an offence or an investigation;
where the disclosure is required by law.

You may withdraw your consent by:

contacting any BCAA office; or
contacting the Chief Privacy Officer in writing:

BCAA

4567 Canada Way

Burnaby, BC V5G 4T1

Attention: Chief Privacy Officer

or fax us at 604.268.5585

or email us at privacy@bcaa.com

E. Storage of and Access to Personal Information

Your personal information may be stored and accessed outside of Canada in which case it will be subject to the laws of that foreign jurisdiction. You may contact the BCAA Chief Privacy Officer for further information about how and where your personal information may be stored and accessed.

F. Limiting Collection of Personal Information

We only collect the information that we reasonably require to deliver products or services and information to you.

G. Limiting Use, Disclosure and Retention of Personal Information

We do not use or disclose your personal information for any purposes other than those for which it was collected or otherwise as set out in this Policy, except with your consent or as required or permitted by applicable law.

Your personal information is retained for as long as it is necessary to fulfill the purpose for which it was collected (unless applicable law or a reasonable business purpose justifies a longer retention period).

H. Accuracy

Your personal information is kept as accurate, complete and up-to-date as is necessary and reasonably practical for the purposes for which it is to be used. If you have any concern with the accuracy of your personal information please contact BCAA.

I. Safeguards

We protect your personal information by using safeguards that are appropriate to the sensitivity of the information.

Each of our employees is responsible for maintaining the confidentiality of all personal information to which they have access. We keep our employees informed about our policies and procedures for protecting personal information.

BCAA maintains comprehensive security controls to protect against non-authorized access, use, alteration, duplication, destruction or disclosure. For example:

While we may collaborate with partners to provide products and services our partners only have access to the personal information required to provide their services to BCAA;
If we use a third party to deliver our products and services and that third party may receive personal information in the course of providing services to BCAA, contractual measures will be in place to protect the personal information;
BCAA maintains the appropriate level of security for personal information regardless of the format in which the information is maintained;
BCAA has strict procedures in place for the destruction, deletion and disposal of personal information when appropriate.

J. Openness

We will make our policies and practices relating to the management of your personal information readily available to you.

K. Access to Your Personal Information

Upon completion and submission of an Access to Personal Information request, you will be informed of the existence, use and disclosure of your personal information if permitted by law.

You may access your personal information by contacting BCAA at the following address:

BCAA

4567 Canada Way

Burnaby, BC V5G 4T1

Attention: Chief Privacy Officer

or fax us at 604.268.5585

or email us at privacy@bcaa.com

BCAA will respond to your request in the time required.

You can ask to correct any of your personal information and such a request will be honoured if appropriate in the circumstances. Contact BCAA using the contact information set out above if you believe your personal information is incorrect.

L. Challenging Compliance

If you disagree with how BCAA has responded to a request to access your personal information or to a request to correct your personal information you can challenge BCAA’s compliance with BCAA’s Chief Privacy Officer.

BCAA has an internal complaint resolution procedure for privacy and information matters. Complaints are reviewed by the Chief Privacy Officer, who will consult with management personnel, regional officers or others as appropriate. A written response will be provided to the individual, usually within thirty (30) days.

M. Site Specific Information

This Privacy Policy applies to BCAA’s collection, use and disclosure of your personal information regardless of the way in which BCAA obtains that personal information.

However, there are specific issues that arise when you use the Site that you should be aware of. Use of the Site constitutes your acceptance of this Privacy Policy and the explanation below about how your personal information may be used:

When you visit the Site your IP address will be tracked by BCAA;

Some of the resources on the Site require you to submit personal information through the Site including an on-line application for membership or purchase of insurance;

You can create an account using the Site which will require that you provide your personal information to BCAA and BCAA will use that personal information to administer your account;

BCAA uses “cookies” in order to track users of the Site (a cookie is a file sent by a website and stored on your computer);

BCAA also uses cookies to track hits on the Site to help BCAA provide you with information that may be useful to you to personalize future visits to the Site;

BCAA uses information about the use of its Site for statistical and survey purposes to improve our Site;

If you provide personal information through the Site it will be used and disclosed by BCAA as described in this Privacy Policy;

We use standard web server log files, to help us count visitors, improve our Site and evaluate our site's technical capacity.

The Site contains links to other, third party sites. Once you link to another site, you are subject to the privacy and security policies of the new site. We encourage you to read the privacy policy of any site that you visit, particularly if you provide personal information through that other site.

N. Artificial Intelligence and Related Technologies

We may use artificial intelligence, machine learning and similar technologies (“AI Technologies”), including AI Technologies provided by third parties, in our business operations and the provision of our services. Your personal information that we collect and use as part of rendering our services may be processed using AI Technologies. We do not use your personal information to train generalized, public AI models and we do not engage in automated decision making regarding qualification or provision of services without human intervention.

O. California Residents

If you are a California resident, do not enter your personal information through this site or other electronic means. You may inquire about our services through our call centre at 1.888.268.2222.

BCAA does not sell or rent any personal information.