Revline Drive (“Revline,” “we,” “us”) is operated from Toronto, Ontario, Canada. We respect your privacy and handle your personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law. This policy explains what we collect, why, and your rights.
1. Who we are
Revline Drive is an editorial publication covering performance and luxury cars. We are a small independent operation; you can reach us at /en/contact.
2. Information we collect
We collect the minimum information necessary to operate the site:
- Contact form submissions. When you write to us via the contact form, we store your name, email address, subject, message, IP address, browser user agent, and the time you submitted it.
- Admin / contributor accounts. For Revline staff and approved contributors only: email address, hashed password (Argon2id — we never see your plaintext password), and an audit log of session activity.
- Reader (“Garage”) accounts.When you sign up to save cars: email address, hashed password (Argon2id), and account timestamps. We also capture your browser-reported timezone and language tag, your approximate country and region (derived from your IP address via your network provider's edge headers), and the IP you signed up from. We use these signals to show prices and affiliate links in your region, to time alert emails for your morning, and to detect fraudulent signups. We do not use them for advertising or profiling. We never email-verify your address.
- Cookies and local storage. A session cookie when an admin signs in (necessary for the login to work). Local-storage entries on your device for your preferences (dark / light theme, metric / imperial units). No third-party advertising or analytics cookies are set by us.
- Server logs. Standard web-server logs (IP, request URL, response code, user agent, timestamp). Retained for up to 30 days for security and abuse-prevention purposes.
- Anti-spam verification. If we have Cloudflare Turnstile enabled on a form, your browser exchanges an opaque token with Cloudflare to confirm you're human. See Cloudflare's privacy policy.
3. What we don't collect
- No third-party advertising trackers, no Google Analytics, no Meta pixel, no behavioural profiling.
- No payment information (we don't sell anything directly on the site).
- No sensitive personal information (health, biometric, etc.).
4. How we use your information
We use what we collect strictly to:
- Reply to your messages (if you contacted us).
- Operate, secure, and improve the site.
- Detect and prevent abuse, spam, and fraud.
- Notify you of new articles or features, but only if you explicitly opt in to a newsletter or alert.
- Comply with legal obligations.
5. How we share your information
We do not sell your personal information. We do not share it with advertisers. We share it only in these limited circumstances:
- Service providers we use to run the site — currently the host where our database and files live, our transactional email provider (when configured), and Cloudflare (DNS and Turnstile when enabled). Each is bound to confidentiality and to use the data only on our instructions.
- Slack notifications (internal). If we have Slack notifications enabled for the contact form, your message body, name, and email are sent to our private team Slack channel so we see it quickly. The message is not shared further.
- If legally required — for example a valid court order, lawful subpoena, or other legal process. We will push back on overbroad requests where appropriate.
6. International data transfers
Some of our service providers process or store data outside Canada (typically in the United States or the European Union). PIPEDA permits cross-border transfers provided we use comparable contractual protections, which we do. By using the site you understand that your information may be processed in those jurisdictions, including under their laws.
7. Data retention
- Contact form messages: kept while reasonably relevant for follow-up, then archived or deleted on a schedule of up to 24 months unless a longer period is needed for legal or audit reasons.
- Server logs: up to 30 days.
- Admin accounts: kept while the account is active. Deactivated accounts are purged after a reasonable period.
8. Your rights under PIPEDA
You have the right to:
- Ask us what personal information we hold about you.
- Ask us to correct inaccurate information.
- Withdraw your consent for ongoing use (subject to legal or contractual obligations we already owe).
- Ask us to delete information we're not legally required to retain.
- Complain to the Office of the Privacy Commissioner of Canada if you believe we've mishandled your information.
Send any of these requests to /en/contact and select “General enquiry.” We will respond within 30 days as required by PIPEDA.
9. Security
We use industry-standard measures to protect your information: HTTPS in transit, hashed passwords (Argon2id), least-privilege access, and security patches for our software stack. No method of transmission or storage is 100% secure; if a breach affects your information, we will notify you in accordance with PIPEDA breach-notification obligations.
10. Children
Revline Drive is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe we have, please contact us and we will delete it.
11. Third-party links
We sometimes link to articles, sources, or manufacturer websites. We're not responsible for the privacy practices on sites we don't operate. Please read their policies before submitting information to them.
12. Changes to this policy
We may update this policy from time to time. The “Effective” date above shows when. Material changes will be noted on the homepage or by email if you have an account with us.
13. Contact
Privacy questions, access requests, or complaints: use the contact form and select “General enquiry.”
This policy is provided in good faith and reflects our current practices. It is not legal advice. If you have specific legal questions about your data, consult a lawyer.