BMC Wholesale Mobile App — Privacy Policy
Last updated: May 13, 2026
This Privacy Policy describes how Best Mobile Canada Inc. ("BMC", "we", "us", "our") collects, uses, and shares information when you use the BMC Wholesale mobile application (the "App") for iOS and Android.
1. Who we are
Best Mobile Canada Inc.
Quebec, Canada
Website: https://bmcwholesale.com
Contact: support@bmcwholesale.com
2. The App is for approved business members only
BMC Wholesale is a B2B (business-to-business) platform restricted to approved wholesale customers. You cannot create an account from within the App. Accounts are created by BMC after a manual approval process. The App is not intended for use by consumers or by anyone under the age of 18.
3. Information we collect
3.1 Information you provide
- Email address — used to sign in
- Password — stored hashed (bcrypt) on our server; never visible to staff
- Name, company name, phone number — provided during account approval
- Messages you send to BMC support staff through the in-app messaging feature
3.2 Information generated by your use of the App
- Reservations and orders you place through the App
- Bids you place on weekly auctions
- Login attempts and timestamps — for security and rate-limiting
- Push notification token (Expo push token) — used only to deliver notifications to your device
3.3 Information we do NOT collect
- We do not collect your location
- We do not access your contacts, photos, microphone, or camera
- We do not track you across other apps or websites
- We do not use advertising identifiers
- We do not use third-party analytics, advertising networks, or trackers
4. How we use your information
We use the information collected solely to operate the wholesale platform:
- Authenticate you securely (JWT tokens, refresh tokens)
- Display your reservations, orders, member score, and account history
- Process reservations, auction bids, and orders
- Send push notifications about your reservations, orders, auctions, and messages
- Communicate with you via in-app messages
- Prevent fraud, abuse, and unauthorized access
- Comply with our legal and tax obligations
5. How we share your information
We do not sell or rent your information to anyone. We share information only in these limited cases:
- Push notification delivery — Expo (Expo Application Services) receives your push token and the notification payload to deliver it to Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM). See Expo's policy at expo.dev/privacy.
- Shipping carriers — when your order ships, your name and shipping address are shared with the carrier (Canada Post, FedEx, UPS, etc.) for delivery.
- Legal compliance — if required by law, court order, or to protect our legal rights.
6. Where your data is stored
All BMC Wholesale data is stored on servers located in Canada. Push notification delivery transits through Expo's infrastructure (United States) and the operating system vendor (Apple in the United States, Google in the United States).
7. Data retention
We retain your account information for as long as your account is active. Reservations, orders, and message history are retained for at least 7 years for accounting and tax compliance under Canadian law. Login attempts are retained for 90 days.
8. Your rights
Under Canadian privacy law (PIPEDA) and Quebec's Law 25, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account (subject to legal retention requirements)
- Withdraw consent for non-essential processing
- Lodge a complaint with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, contact us at support@bmcwholesale.com.
9. Security
We protect your information using industry-standard measures:
- HTTPS/TLS encryption for all data in transit between the App and our servers
- Passwords stored with bcrypt hashing (never in plaintext)
- JWT-based authentication with short-lived access tokens and rotating refresh tokens
- Access tokens stored in the device's secure Keychain (iOS) or Keystore (Android)
- Rate limiting on login attempts
- Server access restricted to authorized BMC staff via 2FA
10. Notifications
The App may send you push notifications about your reservations being approved, new messages from BMC, auctions you participate in, and shipping updates. You can disable notifications at any time in your device's system settings.
11. Children
The App is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by email. The "Last updated" date at the top of this policy will reflect the most recent revision.
13. Contact us