Bus.com Privacy Policy
Last Updated: June 27, 2026
California residents: This Privacy Policy is supplemented by the “Your California Privacy Rights (CCPA/CPRA)” section below, which describes the categories of personal information we collect, how we use and disclose it, your rights under California law, and how to exercise them. In the event of a conflict, that section controls for California residents.
9139249 Canada Inc. operating as Bus.com (“Bus.com”/“we”/“us”/“our”) is committed to protecting your privacy. We make the website, https://www.bus.com/ (the “Website”) available together with our services as further described in our Terms of Use (the “Services”). This Privacy Policy describes how we collect, store, use and distribute information about our users through the Website and Services.
Consent: By using the Website or our Services you consent to the use of your Personal Information as described in this Privacy Policy. Except as set forth in this Privacy Policy, your Personal Information will not be used for any other purpose without your consent. We will not actively collect Personal Information for the purpose of sale or marketing in a way that specifically identifies the individual. In other words, we don’t sell customer lists. You may withdraw your consent to our processing of your Personal Information at any time. However, withdrawing consent may result in your inability to continue using the Website and/or the Services. Although we do not sell customer lists for money, our use of advertising technologies (described under “Advertisements” below) may constitute a “sale” or “sharing” of personal information for cross-context behavioral advertising under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). California residents may opt out at any time as described in the “Your California Privacy Rights” section below. We will not discriminate against you for exercising any of your privacy rights, and we do not condition your access to the Services on a waiver of those rights.
Collection of Information
We aim to collect, use and disclose only such information as is required to enable us to manage your account, to provide the Services, to send you updates regarding the service, to maintain our customer/visitor lists, to respond to your inquiries or provide feedback, for identification and authentication purposes, for service improvement. We will maintain the confidentiality of any contact information you provide to us on signing up for our Services or contacting us with questions or for further information and we will use it only for the purposes for which we have collected it (subject to the exclusions and disclosures we have listed below), unless you agree that we may disclose it to other third parties.
Two types of information may be collected through the Website and our Services: Personal Information and Non-Personal Information. This Privacy Policy does not extend to the collection, use or disclosure of the following information which is currently not limited by applicable privacy laws: (a) information that is publicly available, such as names, addresses, telephone numbers and electronic address when listed in a directory or made available through directory assistance; or (b) Non-Personal Information (as defined further below).
“Personal Information“ is personally identifiable information, such as your name, address, e-mail address, credit card information, birth date and gender. At the time of collection, we will clearly identify the information being collected and the purposes for which it will be used. It is always your choice whether or not to provide Personal Information but if you choose not to provide certain requested Personal Information, in some instances you may not be able to register to use the Website or Services or be able to access and use the Website or Services at all. In other instances, your choice not to provide certain other Personal Information may mean that you will not be able to use certain features of the Website or Services. We may collect Personal Information in respect of the Website or Services through registration processes; communications with you; information downloads; service use; purchases; user support; and surveys.
“Non-Personal Information“ is information of an anonymous nature, such as an Internet Protocol Address (IP Address), the domain used to access the Website or Services, and the type and version of browser or operating system being used by visitors to access the Website or Services. Aggregate information, such as demographic statistics of our users (e.g. average age or geographical location of our users), number of visitors, what pages users access or visit, and average time spent on the Website or Services is not considered Personal Information. Similarly, business contact information such as the name, title, business address, e-mail address, or telephone number of a business or professional person or an employee of an organization is not considered Personal Information.
Although the use of certain Non-Personal Information collected, used or disclosed through the Internet as described herein is not restricted (and to the extent that such is the case, the obligations under this Privacy Policy do not apply to such information), we provide information in this Privacy Policy about the collection of such information for the sake of transparency with respect to the operation of the Website and Services. Such Non-Personal Information is collected or derived by us in the course of operating this Website and our Services. For example, our servers may automatically collect Non-Personal Information that is provided through your browser or stored in a cookie.
Use of Information
We collect information for the following purposes:
Start a Trip: You may submit a trip request without registering for an account. If you would like to submit a trip request, you must provide us with your email address, the origin and destination of the trip, the date and time of the trip and any additional notes regarding the trip. We use this information to review the trip request and to determine whether we can post the proposed trip on our Website for others to consider. We will email you if we post the trip on our Website so that you can register for an account and book the trip.
Registration: In order to register for our Services and book trips, you must provide certain Personal Information to us such as your full name and email address. You also have the option to register for an account using your Facebook credentials. If you register using your Facebook credentials, we will also collect and use the Personal Information associated with your Facebook account pursuant to this Privacy Policy. The information we will have access to in respect of your Facebook account will depend on Facebook’s privacy policy as well as any applicable privacy preferences you may have selected in respect of your Facebook account.
Book a Trip: If you book a trip using our Services, we will collect the following information from you: your full name, address, payment information, the origin and destination of the trip, the date and time of the trip and any additional notes regarding the trip. You will also have the option to provide us with your phone number. We use such information to book your trip and remit payment for such trip. Information about your trip history will be stored in your account and may be used by us according to this Privacy Policy.
Payments: In order to purchase a ticket, you will be required to pay by credit card. You must submit your payment information to our merchant account payment gateway provided and hosted by Stripe. All payment information that you provide is collected and stored by Stripe, and Bus.com does not collect or store any credit card or payment information. All personal information you provide in connection with making a payment will be treated in accordance with the Stripe Privacy Policy, which you should read carefully.
Location Services: If you are using the Bus.com App, we will request access to the location services on your mobile device. We use this access to provide you with information about where the bus is relative to your location.
Transactional Notifications: We provide notifications for certain activities relating to your use of our Services despite your indicated preferences, for example we may send you notices confirming trips that you have booked.
Marketing Communications: If you opt-in to receive marketing communications from us or otherwise provide us with your email address or cell number, we will keep you up to date on our products and services and may send you other communications such as feedback requests about your experiences. You may withdraw your consent to receiving marketing communications from us at any time by following the opt-out instructions.
Disclosure to event hosts: If you purchase a bus ticket for transportation to an event using the Bus.com Services, you hereby agree to Bus.com providing name to the hosts or organizers of any events which you attend and for which you have used the Bus.com transportation Services. Such event hosts will use this information for record keeping purposes, service improvements, and statistics. If you provided such event hosts with your contact information when you purchased your event tickets or during any other transaction with such event hosts, and have provided such event hosts with consent to receive marketing communications, the hosts may also contact with you with targeted information about other promotions or events which may or may not be related to the Bus.com Services, or ask you for feedback on your satisfaction with the Bus.com Services. Any information that you provide to an event host will be treated in accordance with the terms of such event host’s privacy policy, which you should read before you provide any such information.
Statistics: We also collect statistics about use of the Services which we use for analytics including predictive analytics. Aggregate statistics that do not personally identify an individual will be kept by us and such aggregate statistics may be made available to other members or third parties.
System Logs & Cookies: Cookies are used by us to track content usage and traffic on the Website and Services. A cookie is a feature of your web browser that consists of a text file that is placed on your hard disk by a web server. The Website uses cookies to help it compile aggregate statistics about usage of this Website, such as how many users visit the Website, how long users spend viewing the Website, and what pages are viewed most often. This information is used to improve the content of the Website. You can set your browser to notify you when you are sent a cookie. This gives you the chance to decide whether or not to accept it. If you disable cookies, you may not be able to take advantage of all the features of the Website or Services.
Your IP address is reported by your web browser whenever you visit a page on the Website. This information is recorded together with your registration information on our databases.
Advertisements: Advertisements appearing on the Website may be delivered by us or one or more third-party web advertisers. These third party web advertisers may set cookies. These cookies allow the advertisement server operated by that third party to recognize your computer each time they send you an online advertisement. Accordingly, advertisement servers may compile information about where or whether you viewed their advertisements and which advertisements you clicked on. This information allows web advertisers to deliver targeted advertisements that they believe will be of most interest to you. The Privacy Policy applies to cookies placed on your computer by us, but does not cover the use of cookies by any third-party web advertisers. For the privacy practices of such third-party web advertisers, you should consult the applicable privacy policy for the relevant third-party web advertiser(s). We also use your email address and Facebook account information to target advertisements to you when you are visiting other websites. Under the CCPA/CPRA, this targeted (cross-context behavioral) advertising and the associated disclosure of identifiers and internet activity to third-party advertisers is treated as “selling” and/or “sharing” personal information. California residents have the right to opt out of this activity through the “Do Not Sell or Share My Personal Information” link in our website footer, and we honor opt-out preference signals (including the Global Privacy Control). We do not knowingly sell or share the personal information of consumers under 16 years of age without affirmative (opt-in) consent.
Third-Party Links: The Website may contain links to other third-party websites that are not owned or controlled by us. Such third-party websites are governed by the terms and conditions and privacy policies of such third-party providers and we are not involved in any interaction or transaction between you and such third-parties.
If we plan to use your Personal Information in future for any other purposes not identified above, we will only do so after informing you by updating this Privacy Policy. See further the section of this Privacy Policy entitled ‘Amendment of this Policy’.
Disclosures & Transfers
We have put in place contractual and other organizational safeguards with our agents (see further below) to ensure a proper level of protection of your Personal Information (see further Security below). In addition to those measures, we will not disclose or transfer your Personal Information to third parties without your permission, except as specified in this Privacy Policy (see further Important Exceptions below).
As at the date of this Privacy Policy, we share Personal Information about you in respect of the Website or Services only with our service providers and partners which include transportation companies (including the bus drivers), the event hosts and organizers providing/hosting/organizing the event you attending, website hosting, cloud service providers, analytics providers, email marketing providers and payment processors. For some vehicle types, we could share your contact information with third party providers who will contact you to assist you with your reservation.
We used cloud-based servers with data centers located world-wide, and accordingly, your Personal Information may be available to governments and their agencies all over the world, under a lawful order, irrespective of the safeguards we have put in place for the protection of your Personal Information.
From time to time we may employ third parties to help us improve the Website and/or the Services. These third parties may have limited access to databases of user information solely for the purpose of helping us to improve the Website and/or the Services and they will be subject to contractual restrictions prohibiting them from using the information about our members for any other purpose.
Important Exceptions
We may disclose your Personal Information to third parties without your consent if we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other Website members, other users of the Services, or anyone else (including the rights or property of anyone else) that could be harmed by such activities. We may disclose Personal Information when we believe in good faith that such disclosure is required by and in accordance with the law.
We may also disclose your Personal Information in connection with a corporate re-organization, a merger or amalgamation with another entity, a sale of all or a substantial portion of our assets or stock, including any due diligence exercise carried out in relation to the same, provided that the information disclosed continues to be used for the purposes permitted by this Privacy Policy by the entity acquiring the information.
Security
The security of your Personal Information is important to us. We use commercially reasonable efforts to store and maintain your Personal Information in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Personal Information that you provide to us. We have implemented procedures designed to limit the dissemination of your Personal Information to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you.
You are also responsible for helping to protect the security of your Personal Information. For instance, never give out your email account information or your password for the Services to third parties.
Retention
We will keep your Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. We may retain certain data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of aggregated, non-personally-identifiable data, account recovery, or if required by law. All retained personal information will remain subject to the terms of this Privacy Policy. We do not retain personal information for longer than is reasonably necessary for the purpose for which it was collected. We determine retention periods for each category of personal information based on (i) the length of our active relationship with you and your account; (ii) the time needed to provide the Services and process and support your bookings and payments; (iii) our legal, tax, accounting, and regulatory obligations; and (iv) the period needed to establish, exercise, or defend legal claims and to prevent fraud or abuse. For example, account and booking records are generally retained for the life of the account plus the period required by applicable law; payment records are retained as required for tax and audit purposes; and marketing contact information is retained until you withdraw consent or opt out. When you exercise a valid right to deletion, we will delete your personal information from our records and direct our service providers to do the same, except where an exception under the CCPA/CPRA or other applicable law permits retention.
Your California Privacy Rights (CCPA/CPRA)
This section applies to residents of California and supplements the rest of this Privacy Policy. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA/CPRA”), and the regulations of the California Privacy Protection Agency. Capitalized terms not defined here have the meaning given to them in the CCPA/CPRA. For purposes of this section, “personal information” and “sensitive personal information” have the meanings given in the CCPA/CPRA and are not limited by the definitions of “Personal Information” and “Non-Personal Information” used elsewhere in this Privacy Policy.
Categories of personal information we collect. In the preceding 12 months we have collected the following categories of personal information (as defined in Cal. Civ. Code § 1798.140):
- Identifiers — name, postal address, email address, telephone number, account credentials, IP address, and online and social media identifiers (including Facebook account information).
- Customer records / commercial information — trip origin and destination, trip date and time, booking and trip history, and records of products or services purchased or considered.
- Internet or other network activity — browsing and usage data, pages viewed, cookie data, and interactions with our advertisements.
- Geolocation data — location information from your mobile device when you use the Bus.com App (which may include precise geolocation).
- Financial / payment information — payment card and billing information, which is collected and stored by our payment processor (Stripe); Bus.com does not store full card numbers.
- Characteristics and inferences — age and gender (where provided) and inferences drawn from the above (including through predictive analytics) to create a profile reflecting preferences and behavior.
Sensitive personal information. Depending on your use of the Services, we may collect account log-in credentials and precise geolocation (through the App), which are “sensitive personal information” under the CCPA/CPRA. We use sensitive personal information only for the purposes permitted by Cal. Civ. Code § 1798.121 (such as providing the Services you request, security, and fraud prevention) and not to infer characteristics about you. Because we limit our use of sensitive personal information to these permitted purposes, the right to limit described below may not apply; if our practices change, we will provide a “Limit the Use of My Sensitive Personal Information” choice.
Sources and purposes. We collect personal information directly from you; automatically from your device and browser (e.g., cookies and server logs); and from third parties such as Facebook, event hosts and organizers, transportation partners, analytics providers, and our payment processor. We use personal information for the business and commercial purposes described in the “Use of Information” section, including to provide and book the Services, process payments, communicate with you, provide customer support, maintain security and prevent fraud, conduct analytics (including predictive analytics), improve the Website and Services, and for marketing and advertising consistent with this Privacy Policy and your choices. We will not collect additional categories of personal information, or use the personal information we collected for materially different, unrelated, or incompatible purposes, without providing you notice.
Disclosure, “selling,” and “sharing.” In the preceding 12 months we have disclosed identifiers, customer records, internet activity, geolocation, and financial information to service providers and partners for business purposes, including transportation companies and drivers, event hosts and organizers, hosting and cloud providers, analytics providers, email/marketing providers, and payment processors. We do not sell customer lists for money. However, our use of third-party advertising cookies and our disclosure of identifiers, internet activity, and Facebook account information to target advertising on other websites may constitute “selling” and/or “sharing” (cross-context behavioral advertising) under the CCPA/CPRA, and in the preceding 12 months we may have sold or shared identifiers and internet or other network activity for these purposes. We do not knowingly sell or share the personal information of consumers under 16 years of age without affirmative authorization (opt-in consent from the consumer if 13–15, or from a parent or guardian if under 13).
Your rights. Subject to certain exceptions, California residents have the right to:
- Know / Access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it.
- Delete personal information we have collected from you, subject to legal exceptions.
- Correct inaccurate personal information we maintain about you.
- Opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising.
- Limit the use and disclosure of sensitive personal information to that which is necessary to provide the Services, where applicable.
- Non-discrimination — you will not receive discriminatory treatment for exercising any of these rights.
How to exercise your rights. You may submit a request to know, delete, or correct through either of the following methods: (1) by calling us toll-free at 1 (855) 428-7266; or (2) by emailing [email protected] or completing the request form available on our Website. To opt out of the sale or sharing of your personal information, use the “Do Not Sell or Share My Personal Information” link in our website footer; where applicable, you may limit sensitive personal information through the “Limit the Use of My Sensitive Personal Information” or “Your Privacy Choices” link. We also recognize opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out of sale/sharing for the browser or device from which the signal is sent.
Verification and authorized agents. To protect your information, we will take steps to verify your identity before responding to a request to know, delete, or correct, generally by matching information you provide against information in our records. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization (such as a signed permission or power of attorney) and may require you to verify your identity directly with us.
Our response. We will confirm receipt of a request within 10 business days and respond within 45 calendar days. If we need more time (up to an additional 45 days), we will notify you of the reason and extension in writing. We will act on opt-out requests as soon as feasible and no later than 15 business days from receipt.
Automated decisionmaking. We use analytics, including predictive analytics, to operate and improve the Services. We do not currently use automated decisionmaking technology to make decisions that produce legal or similarly significant effects concerning you (such as decisions about credit, employment, or access to essential goods or services). Where we conduct processing that presents significant risk to consumers’ privacy, we perform and document risk assessments as required by the CCPA/CPRA regulations. If we begin using automated decisionmaking technology for significant decisions, we will provide a pre-use notice and the opt-out and appeal rights required by applicable law before doing so.
“Shine the Light.” California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for those third parties’ direct marketing purposes. You may submit such a request to [email protected].
Contact for California requests. Questions about this section or your California privacy rights may be directed to [email protected] or 1 (855) 428-7266. We will review and update this Privacy Policy at least once every 12 months.
Amendment of this Policy
We reserve the right to change this Privacy Policy at any time. If we decide to change this Privacy Policy in the future, we will post an appropriate notice on the home page. Any non-material change (such as clarifications) to this Privacy Policy will become effective on the date the change is posted and any material changes will become effective 30 days from their posting on the Website. Unless stated otherwise, our current Privacy Policy applies to all Personal Information that we have about you. The date on which the latest update was made is indicated at the bottom of this document. We recommend that you print a copy of this Privacy Policy for your reference and revisit this policy from time to time to ensure you are aware of any changes. Your continued use of the Website and Services signifies your acceptance of any changes.
Access and Accuracy
You have the right to access the Personal Information we hold about you in order to verify the Personal Information we have collected in respect to you and to have a general account of our uses of that information. Upon receipt of your written request, we will provide you with a copy of your Personal Information although in certain limited circumstances, we may not be able to make all relevant information available to you such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request. We will endeavor to deal with all requests for access and modifications in a timely manner.
We will make every reasonable effort to keep your Personal Information accurate and up-to-date, and we will provide you with mechanisms to update, correct, delete or add to your Personal Information as appropriate. As appropriate, this amended Personal Information will be transmitted to those parties to which we are permitted to disclose your information. Having accurate Personal Information about you enables us to give you the best possible service. In addition to access and correction, California residents have the right to request deletion of their personal information and to exercise the other rights described in the “Your California Privacy Rights (CCPA/CPRA)” section below. We will confirm receipt of a verifiable consumer request within 10 business days and respond within 45 calendar days, with a further 45-day extension where reasonably necessary and with notice to you.
Contact Us
You can help by keeping us informed of any changes such as a change of address or telephone number. If you would like to access your information, if you have any questions, comments or suggestions of if you find any errors in our information about you, please contact us at: [email protected].
Hoil Kim, General Counsel
[email protected]
1 (855) 428-7266
Bus.com 4200 boulevard Saint-Laurent Suite 610 Montréal, QC H2W 2R2