Privacy Policy

Updated October 11, 2026 · Lumilogix · Québec, Canada

Lumilogix, based in Québec, Canada, is responsible for the personal information described in this policy. This policy covers our public marketing website and demonstration, product-interest and privacy enquiries. It does not describe the processing of warehouse or transportation records within customer WMS or TMS accounts; those services require separate agreements and privacy information.

1. Information we collect and why

• Demonstration requests: the form requires your name and work email; your company name is optional. We use these details to identify your enquiry, reply and arrange the demonstration you request.
• TMS interest requests: the form requires your work email so we can respond to your request for a product-availability update. This is not a subscription to general marketing emails.
• Email correspondence: when you send a message, we receive its contents, attachments, sender and recipient details, timestamps and other email metadata. We use relevant information to handle your request and follow-up. Please send only what is necessary.
• Website connection information: Cloudflare may process your IP address, requested pages, timestamps, browser information and security events to deliver and protect the website and diagnose delivery problems.
• Privacy requests and complaints: we use your contact details, request, relevant correspondence and proportionate identity-verification information to respond and meet applicable obligations.

You can browse without completing a form. Both forms prepare a message in your own email application; they do not send the form fields to a website database. Lumilogix receives the message only when you send it. Your email application may save a draft under its own settings. You can instead email support@lumilogix.co directly.

If you do not provide a way to reply or the information needed to address your enquiry, we may be unable to complete it. Do not send passwords, payment-card details, identity documents or customer operational records with an initial enquiry.

2. Your choices and communications

We use enquiry information for the request you make and related follow-up. We do not sell enquiry information or use it for advertising profiles. A demo request does not enrol you in a newsletter. You can ask us to stop optional follow-up or withdraw consent by emailing the privacy officer below. Withdrawal does not undo prior lawful processing and may prevent us from completing an outstanding request.

Any future general promotional mailing will require its own applicable consent basis and legally required sender information and unsubscribe process. A privacy policy is not a request for marketing consent. We will explain any materially new purpose and obtain consent where required before using information for it.

3. Cookies, analytics and automated processing

The current site code contains no advertising trackers, third-party analytics scripts, cookies or persistent browser storage. Cloudflare may process necessary security or delivery data and may use security cookies depending on the features enabled. Browser and email-application storage follow your own settings.

The marketing site has no account login, payment collection, AI chat or form-based automated decision-making. References to AI features in our products do not mean this website sends form entries to an AI model. We will update this policy and implement any required notice or choice before introducing new tracking or collection features.

4. Who may receive information

Likitha Cherukuri, our Privacy Officer, has access to the support inbox and handles enquiries. Access within Lumilogix is restricted to authorized people who need the information for the stated purposes.

• Cloudflare: website hosting, content delivery and security. See Cloudflare’s privacy notice.
• Microsoft 365 / Outlook through GoDaddy: hosting and delivery of messages to support@lumilogix.co, mailbox administration and related security and support. Microsoft, GoDaddy and their applicable service providers may process information to provide these services. See Microsoft’s privacy statement and GoDaddy’s privacy notice.

We may also disclose relevant information when legally required, or when otherwise authorized by applicable law to address fraud, a security incident or a legal claim. Any such disclosure must be limited to the information needed for that purpose. These circumstances do not give us unrestricted permission to share your messages.

5. Processing outside Québec

Our hosting and email providers may store or process information outside Québec, including outside Canada. Information may be subject to the laws and lawful access requests of those jurisdictions. We do not promise that all website or email data remains in Canada. Provider locations, contractual protections and any required privacy impact assessment must be reviewed for the services used.

6. Retention and deletion

Our schedule sets a maximum of 12 months after the last substantive exchange with you for demo and TMS-interest enquiries. Information is deleted sooner when the enquiry’s purpose is fulfilled or it is no longer needed, subject to legally required retention. This is Lumilogix’s business retention limit, not a statutory minimum. Automated messages and unanswered reminders do not restart it. TMS interest expires at this limit even if the product has not launched.

The Privacy Officer is responsible for monthly reviews and deletion of expired messages, attachments and working copies. If an enquiry becomes a customer relationship, only information needed for that relationship is moved to the applicable customer record and retention schedule. A legal retention exception must identify the relevant records and period.

Privacy-request and complaint records are kept as needed to handle the matter and meet applicable legal obligations; the enquiry limit does not override a legally required record-retention period. Information relevant to an access dispute is preserved as required by law.

Mailbox deletion does not necessarily immediately erase provider backups, recoverable deleted items or security logs. Those copies may follow separate contractual, technical or legal retention cycles. Contact the Privacy Officer for the retention information applicable to your request. Provider settings and deletion procedures still require operational verification before this draft takes effect.

7. Security and confidentiality incidents

The public website uses HTTPS. We limit access to enquiry information and avoid collecting sensitive material through the forms. Email protection also depends on your provider and ours; ordinary email is not a suitable way to send secrets. No internet service can guarantee absolute security.

If a confidentiality incident occurs, our response must include measures to contain it, assess the risk and reduce recurrence. We must keep the required incident record and notify the Commission d’accès à l’information du Québec and affected people when the legal threshold for notification is met. Report a suspected issue to the Privacy Officer without including additional sensitive data.

8. Access, correction and other privacy rights

You may request confirmation that we hold information about you, access to it, correction of inaccurate or incomplete information, and withdrawal of consent. You may also request deletion or cessation of dissemination where the applicable legal conditions are met. These rights are subject to legal limits, including protection of other people’s information.

Where Québec’s portability right applies, you can request eligible computerized information you provided in a structured, commonly used technological format, or its transmission to a legally authorized recipient, subject to applicable exceptions.

Send a written request to support@lumilogix.co, describing the information and the action requested. We may verify your identity or your authority to act for someone else using information proportionate to the request. Do not attach government identification unless we have established that it is necessary and arranged a suitable method.

For access or correction requests governed by Québec law, we will respond in writing promptly and no later than 30 days after receipt. If we refuse all or part of a request, we will explain the legal basis and available recourse. Access is generally free; if an authorized reproduction or transmission charge applies, we will explain it in advance.

9. Complaints and contact

To raise a concern, describe what happened, when it happened and how we can reach you. The Privacy Officer will review the relevant facts, seek clarification if needed and send a written response explaining the outcome and any corrective action. Our target is to acknowledge complaints within five business days and provide an outcome or progress update within 30 days. These targets do not extend statutory deadlines.

You may contact the Commission d’accès à l’information du Québec about your rights or available complaints and review procedures. You do not have to give up a legal remedy by contacting us first.

10. Changes to this policy

We will publish revisions here with an updated date and explain material changes. Additional notice or consent will be provided where required. A revision does not remove your existing rights or authorize an undisclosed use of previously collected information. The French and English versions are intended to describe the same practices; please report any inconsistency.