GRT Pay privacy policy
The Regional Municipality of Waterloo who owns and operates Grand River Transit (“GRT”, “we”, “us”, or “our”) is committed to protecting the privacy of any personal information you (“you”, “user” or “your”) provide to us through the GRT Pay app (the “App”) and the GRT Pay website (the “Website”).
The App and Website offer mobile fare products for sale through Masabi LLC (“Masabi”), our mobile ticketing software provider and the Merchant of Record.
The App and the Website have been designed and configured by Masabi to ensure compliance with the Municipal Freedom of Information and Protection of Privacy Act, R.S.O. 1990, c. M.56, as amended (“MFIPPA”).
Personal information, including your email address, device ID and model, device operating system, IP address, system generated ingest UID, payment information, and usage information will be collected by GRT and Masabi to administer the App and ensure its security. The App may collect geolocation information when you interact with certain features of the App such as making purchases and validating fare products. This data helps us analyze usage patterns and improve our services. You may choose to decline sharing your geolocation, and you will still be able to use the App without providing geolocation data.
When collecting payment information, you have the option to store your payment card details for future transactions. CVV will need to be entered each time. Masabi is fully certified and compliant with Payment Card Industry standards (PCI-DSS). All payment communication is fully encrypted via SSL, any sensitive data stored is highly encrypted and systems are constantly monitored for security vulnerabilities.
The information you provide when you register and/or use the App or Website is collected and used in connection with the services they provide. Any additional use of your information outside of those services requires your consent. Unless authorized by law, the personal information will only be disclosed for the purpose it was collected or a directly related purpose.
Masabi stores the information you provide on servers located in Canada. However, during data processing or maintenance, your data may be accessed from outside of Canada. Masabi is committed to protecting your personal information in accordance with the applicable legal requirements of the region.
To provide you with more digital options to purchase and use GRT mobile fare products, you may also purchase and use GRT mobile fares through Transit App, a third-party application offered by Transit. GRT is not affiliated with Transit but offers this service integration to provide more mobile payment options to users.
When you use Transit App to purchase GRT fares and use GRT services, Transit App will collect your payment information and pass it to Masabi, GRT’s Merchant of Record, to process payment. Transit facilitates these transactions and collects your user data through Transit App and your use of Transit App will be governed by Transit's terms and conditions, available at Transit - Terms of Use (transitapp.com), and their privacy policy, available at Transit - Privacy (transitapp.com). GRT’s service usage and policies, such as the refund policy and product activation on GRT vehicles will govern purchase and use of GRT mobile fares and these policies and usage terms are outlined in the GRT Pay Mobile Ticketing App and Services Terms and Conditions.
If you have questions about the handling of your personal information, please contact us at:
Phone: 519-585-7555 / TTY 519-575-4608
Customer Service Form: grt.ca/customerfeedback
Mail: The Regional Municipality of Waterloo
Grand River Transit
Manager, Marketing & Communications
250 Strasburg Road
Kitchener ON
N2E 3M6
For more information about Region of Waterloo Privacy Statement, please visit the Regional Municipality of Waterloo website.