ECUPROGRAM Inc. — Privacy Policy

Effective Date: August 18th, 2026

​

ECUPROGRAM Inc. ("ECUPROGRAM," "we," "us") provides ECU and TCU calibration, diagnostics, and performance tuning services from 4527 1 St SE, Calgary, Alberta.

This policy explains what personal information we collect, why we collect it, how we protect it, and how you can access or correct it. It is written to meet our obligations under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

1. Accountability — Our Privacy Officer

ECUPROGRAM has designated a Privacy Officer who is accountable for our compliance with this policy.

Privacy Officer:  ECUPROGRAM Email: ecuprogram@gmail.com Phone: 403-457-3650 Mail: ECUPROGRAM Inc., 4527 1 St SE, Calgary, AB T2G 2L2 , CANADA

Direct all privacy questions, access requests, correction requests, and complaints to the Privacy Officer. We respond to written requests within 30 days.

2. Information We Collect

Customer information Name, business name (where applicable), email address, phone number, billing address, and service history.

Vehicle information Vehicle Identification Number (VIN), year/make/model, chassis code, engine code, mileage, ECU and TCU hardware and software part numbers, installed modifications, fault code history, and diagnostic session data.

Calibration and datalog information Original ("stock") ECU/TCU binary files read from your vehicle, modified calibration files we produce, and datalogs recorded during road or dynamometer testing.

Payment information Payment is processed by our third-party payment processors. We receive confirmation of payment and the last four digits of the card. We do not store full payment card numbers on our systems.

Website information When you visit ecuprogram.com we collect standard analytics data — pages viewed, referring source, approximate region, device and browser type — through cookies and similar technologies. See Section 9.

3. Why We Collect It

We collect and use personal information only for these purposes:

• To identify your vehicle correctly and select the correct calibration platform

• To produce, verify, and revise custom calibration files

• To maintain a permanent archive of your original factory file so your vehicle can be returned to stock

• To provide diagnostics, support, and warranty-related follow-up

• To schedule appointments, invoice, and collect payment

• To communicate with you about your job

• To meet legal, tax, and accounting obligations

• To improve our website and services

We do not use your information for any purpose materially different from the above without first obtaining your consent.

4. Consent

By requesting service and providing your information, you consent to collection, use, and disclosure as described in this policy. Where required, we obtain express written consent at intake.

You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice. Contact the Privacy Officer to do so. Withdrawing consent may make it impossible for us to continue servicing your vehicle, including providing revisions or restoring your factory calibration.

5. Marketing Communications

Where you have consented, we may send you service reminders, technical updates, or promotional messages by email or SMS. Every message includes an unsubscribe method. You may opt out at any time without affecting the service you receive. We continue to send transactional messages (appointment confirmations, invoices, job status) regardless of marketing preferences.

6. Disclosure to Third Parties

We do not sell your personal information. We do not rent, trade, or share it for anyone else's marketing purposes.

We disclose information only in these circumstances:

Calibration partners and file services. We may transmit ECU/TCU binary files and the technical vehicle details required to work on them to specialist calibration engineers or file services. We share the minimum technical information necessary. Note that ECU binaries commonly contain the VIN and, on some platforms, immobilizer data — see Section 7.

Service providers. Shop management, invoicing, payment processing, cloud storage, email, and website hosting are provided by third-party vendors bound to protect the information we entrust to them.

Legal requirements. Where required by law, court order, or lawful government request, or to establish, exercise, or defend a legal claim.

Business transfer. In connection with the sale or reorganization of the business, subject to the acquirer honoring this policy.

​

Storage and processing outside Canada

Some of our service providers and calibration partners store or process information outside Canada, including in [LIST COUNTRIES — e.g. the United States and the European Union]. Information held in another country is subject to that country's laws and may be accessible to its courts and law enforcement.

As required by section 13.1 of Alberta's PIPA, you may contact our Privacy Officer for information about our policies and practices regarding service providers outside Canada, and the name or position of a person able to answer your questions about that handling.

7. A Note on ECU Files, VINs, and Immobilizer Data

We want to be accurate rather than reassuring here.

ECU and TCU binary files are technical data, but on most modern platforms, they contain the VIN, and on some (including certain BMW DME variants), they contain immobilizer or security identifiers. These are not fully anonymous files. We treat all vehicle binaries as sensitive.

Accordingly:

• Binary files are stored on encrypted, access-controlled systems

• Access is limited to personnel who require it to perform the work

• Immobilizer and security data is never disclosed to any third party except as strictly necessary to complete your authorized job

• We remove identifying information before sharing files with a calibration partner where the platform permits it without breaking the file; where it does not, we share only with partners bound by confidentiality obligations

8. Retention and Your Stock File Archive

Customer and job records are retained for a minimum of seven (7) years to meet tax, accounting, and warranty obligations.

Original factory ("stock") calibration files are retained indefinitely unless you instruct us otherwise. This is deliberate and it is for your benefit: it means we can return your vehicle to its exact original factory software years later — for a warranty visit, a dealer service, a resale, or a diagnostic process of elimination. Our archive currently contains more than 3,200 documented vehicles.

You may request deletion of your stock file at any time. If you do, we will confirm in writing that the file has been destroyed and that we will no longer be able to restore your vehicle to its original factory calibration. We strongly recommend you obtain your own copy before requesting deletion.

Website analytics data is retained per our analytics providers' settings, typically for 14 to 26 months.

9. Cookies and Website Analytics

ecuprogram.com uses cookies and similar technologies for site functionality, traffic measurement, and (where enabled) advertising measurement. The tools we currently use include:

• [Wix site infrastructure and Wix Analytics]

• [Google Analytics]

• [Meta Pixel]

​

You can block or delete cookies through your browser settings. Blocking cookies may affect site functionality. Where our site presents a cookie consent banner, your choices there govern non-essential cookies.

We do not respond to browser "Do Not Track" signals at this time.

10. Security

We protect personal information with safeguards appropriate to its sensitivity, including:

• Encrypted storage of calibration files and customer records

• Password-protected, access-controlled workstations

• Restricted physical access to the shop's diagnostic and bench equipment

• Access is limited to staff who require the information to do their work

• Secure disposal of records at the end of their retention period

 

No system is perfectly secure. We cannot guarantee absolute security, and information sent to us by email or over the internet travels at your own risk.

11. Breach Notification

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, and will maintain records of the breach as required by law.

12. Your Rights

Subject to limited legal exceptions, you have the right to:

• Access the personal information we hold about you and be told how it has been used and to whom it has been disclosed

• Correct information that is inaccurate or incomplete

• Withdraw consent to further collection, use, or disclosure

• Request deletion of your information, including your archived stock file (see Section 8)

• Complain about our handling of your information

To exercise any of these rights, contact the Privacy Officer in Section 1. We may ask you to verify your identity before releasing information. We respond within 30 days. Access is generally free; we will notify you in advance if a request would incur a cost.

13. If You Are Not Satisfied

If you are not satisfied with our response, you may contact:

Office of the Information and Privacy Commissioner of Alberta Toll-free: 1-888-878-4044 · oipc.ab.ca

Office of the Privacy Commissioner of Canada Toll-free: 1-800-282-1376 · priv.gc.ca

14. Children

Our services are directed to adults. We do not knowingly collect personal information from anyone under 18. If we learn we have done so, we will delete it.

15. Changes to This Policy

We may update this policy. The "Last Updated" date at the top reflects the current version. Material changes will be posted on this page and, where the change significantly affects how we handle information we already hold, communicated to affected customers directly. Continued use of our services after a change constitutes acceptance.

16. Contact

ECUPROGRAM Inc. 4527 1 St SE, Calgary, Alberta [POSTAL CODE] Phone: 403-457-3650 Email: [PRIMARY EMAIL — use ONE address consistently] Web: ecuprogram.com

This privacy policy governs data handling only. Service terms, vehicle condition requirements, liability, and refunds are governed by the ECUPROGRAM Service Terms & Authorization, which is provided and signed at intake.