Processors acting on our behalf.The following providers process personal information on EV Index’s instructions, under contractual confidentiality obligations and their own privacy commitments:
- Vercel Inc.— website hosting, content delivery, and cookieless aggregate page-view analytics (Vercel Web Analytics, described in Sections 3 and 6). Servers may be located in the United States.
- Supabase Inc.— database hosting (servers may be located in the United States).
- Google LLC (Google Analytics 4)— website analytics. Loaded only where you have consented via our cookie banner and absent a GPC opt-out. As described under “Independent third parties” below, when Google Signals is active in this property, Google also processes some GA4 data for its own purposes as a separate controller. Data may be processed in the United States and other jurisdictions.
Independent third parties (separate controllers). The following third parties receive information directly from your browser when you visit the Site (subject to your consent and any GPC opt-out) and process it under their own privacy policies and for their own purposes, not as our processor:
- Google LLC — Google Signals (cross-device tracking and ad personalisation in Google Analytics 4). Google Signals is enabled on our GA4 property. For users signed in to a Google account who have enabled Ads Personalisation, Google associates GA4 event data with their cross-device, signed-in activity for purposes including aggregated cross-device reporting, demographics and interests reporting, and remarketing audiences usable in Google’s advertising products. EV Index does not control or receive that signed-in advertising profile. You may opt out of Google Signals processing by turning off “Ads Personalisation” in your Google account at myadcenter.google.com.
- Google LLC (Google AdSense and ad-network partners) — advertising delivery, measurement, and personalisation. Data may be processed in the United States and other jurisdictions; see Google’s Privacy Policy and Section 4 (Third-party advertising) above for opt-out options.
- Amazon.com.ca, Inc. and its affiliates (Amazon Associates Program). EV Index participates in the Amazon Associates Program. Where you click an affiliate link on the Site to Amazon.ca or an affiliated Amazon site, Amazon receives information about that click — including the referring URL, the EV Index Amazon Associates tracking identifier (tag=evindex-20), and any identifiers or cookies set by Amazon in your browser — and processes it under its own privacy policy in order to attribute any subsequent purchase and pay a commission to EV Index. Amazon may set cookies on your device as part of this process. EV Index does not receive individual purchase details; we receive aggregate commission reporting only. See Amazon’s privacy notice for details.
- Other affiliate networks and partners. If EV Index adds other affiliate programs in the future, the relevant affiliate network will receive information about your click (typically the referring URL and a click identifier) and process it under its own privacy policy in order to attribute any subsequent action and pay out any commission. The current list of affiliate programs in use will be reflected in the cookie banner and consent preference centre on the Site.
- Natural Resources Canada (Geolocator API). When you submit a query to the address search bar on the Site, EV Index forwards the query text server-side to NRCan’s public Geolocator service in order to resolve the address to coordinates. NRCan receives the query text and our server’s IP address; it does not receive your IP. NRCan is an agency of the Government of Canada and processes the query under its own terms of use and the federal Privacy Act.
- OpenStreetMap Foundation (Nominatim). As a fallback when NRCan does not return a match, EV Index forwards the address search query server-side to the Nominatim service operated by the OpenStreetMap Foundation (a non-profit registered in the United Kingdom). The Foundation receives the query text and our server’s IP address; it does not receive your IP. See the OpenStreetMap Foundation Privacy Policy.
Cross-border transfers:Because these providers operate from or process data in the United States and other jurisdictions, your personal information may be transferred outside of Canada (and outside of Québec, for Québec residents). While stored or processed abroad, personal information is subject to the laws of those jurisdictions, including lawful access by foreign authorities. By using the Site, you acknowledge this transfer. For Québec residents, before transferring personal information outside Québec, EV Index conducts a privacy impact assessment of the kind contemplated by section 17 of Law 25, considering the sensitivity of the information, the purposes for which it will be used, the protection measures — including contractual safeguards — that would apply to it, and the legal framework of the destination jurisdiction. We rely on these assessments, together with the providers’ own data-protection commitments, in determining that the transfer affords adequate protection in the circumstances.
The Site may display links to third-party platforms (for example, manufacturer or dealer sites). These third parties operate independently under their own privacy policies; EV Index does not share your personal information with them unless you voluntarily interact with their services.