Privacy Policy
Last updated: April 22, 2026
Our Commitment
At Lumos, protecting your personal information is not a formality — it's a responsibility. This policy explains how we collect, use, retain, and protect your information when you use our website lumos.property.
Lumos Intégrité Inc. is subject to Quebec's Act respecting the protection of personal information in the private sector, modernized by Bill 25 (Law 25). We fully comply with the obligations of this law.
Note: This policy covers our marketing website. If you use our inspector application (
inspector.lumos.property), a separate policy applies to data processed within the application.
Personal Information Protection Officer
In accordance with Law 25, Lumos Intégrité Inc. has designated a personal information protection officer (PIPO):
Sébastien Malherbe, President Lumos Intégrité Inc. 804, rue Alfred-Laliberté Mont-Saint-Hilaire (Quebec) J3H 5M6 Email: privacy@lumos.property
You can contact the PIPO for any questions about this policy, to exercise your rights, to report a privacy incident, or to file a complaint.
Information We Collect
Information You Provide Directly
When you sign up for our waitlist, beta program, or contact us, we collect:
- Full name
- Email address
- Phone number (optional)
- Company name and professional role
- City and province
- Any information you choose to include in a free-form message
Information Collected Automatically
When you browse our site, we automatically collect:
- IP address
- Browser type and operating system
- Pages visited, visit duration, referral source
- Device data (type, screen resolution)
This data is collected through cookies and similar technologies, with your consent (see Cookies section below).
Purposes of Collection
We use your information for the following purposes, and only these:
- Transactional communications: responding to your request, notifying you of a beta spot opening, granting you waitlist access
- Marketing communications (with separate consent): product news, blog articles, event invitations
- Product improvement: anonymized analysis of browsing behavior to improve the site and product
- Legal obligations: responding to legal requests, preventing fraud, protecting our rights
We never use your information for purposes not described in this policy without obtaining new consent.
Consent
We obtain your consent in a free, informed, and specific manner for each purpose:
- Transactional consent: given by the act of signing up (waitlist, form). Necessary to provide the requested service.
- Marketing consent: given via a separate checkbox during registration. You can withdraw it at any time by clicking the unsubscribe link in our emails or by writing to us.
- Non-essential cookie consent: given via the consent banner on your first visit.
You may withdraw your consent at any time, free of charge, for any purpose other than those strictly necessary to provide the requested service.
Cookies and Similar Technologies
We use three categories of cookies:
Essential cookies (always active): necessary for site functionality, security, and language preference. Do not require consent.
Analytics cookies (with consent): measure site audience in aggregate. We use Google Analytics (data hosted in the United States). These cookies are only activated after your explicit consent.
Marketing cookies (with consent): allow us to measure campaign effectiveness and offer you relevant content. Only activated after your explicit consent.
You can modify your cookie preferences at any time via the "Cookie Preferences" link at the bottom of the page.
Data Retention
We retain your information for the following periods:
| Type of information | Retention period |
|---|---|
| Waitlist (if not converted) | 24 months after last interaction |
| Active beta account | Duration of program participation |
| Email correspondence | 36 months after last exchange |
| Technical logs (IP, browsing) | 12 months |
| Consent data and incident registry | 5 years (legal obligation) |
After these periods, your information is either securely destroyed or irreversibly anonymized.
You can request early deletion of your information by writing to privacy@lumos.property.
Sharing with Third Parties
We never sell your personal information. We only share it with the following service providers, strictly necessary for operating our site:
| Provider | Function | Hosting location |
|---|---|---|
| Vercel Inc. | Website hosting | United States |
| Supabase Inc. | Database (waitlist, beta) | Canada (East region) |
| Resend | Transactional and marketing emails | United States |
| Google Analytics | Audience analytics (if consent given) | United States |
| Stripe Inc. | Payments (if applicable) | United States |
Each provider is bound by a contract requiring them to protect your information to standards equivalent to those required by Law 25.
Transfers of Information Outside Quebec
Some of our providers host data in the United States. In accordance with Law 25, we have conducted a Privacy Impact Assessment (PIA) before communicating personal information outside Quebec. This assessment confirmed that:
- The chosen providers offer an adequate level of protection
- The information transferred is limited to what is strictly necessary
- Transfers are governed by appropriate contractual obligations
- Technical measures (encryption in transit and at rest) protect data during transfer and storage
You can request a copy of the relevant PIAs by writing to privacy@lumos.property.
Data Security
We implement the following measures to protect your information:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Multi-factor authentication for administrative access
- Automatic backups and regular restoration testing
- Access controls based on the principle of least privilege
- Continuous monitoring and access logging
- Staff training on privacy obligations
No system is infallible. If an incident occurs, we have a documented response procedure (see next section).
Privacy Incident Procedure
If we become aware of a privacy incident (unauthorized access, loss, unauthorized disclosure, non-compliant use) that presents a serious risk of harm, we will:
- Take immediate measures to contain the incident
- Notify the Commission d'accès à l'information du Québec without delay
- Diligently notify affected individuals
- Record the incident in our internal registry
- Identify and implement measures to prevent recurrence
If you suspect an incident affecting your information, contact us immediately at privacy@lumos.property.
Your Rights
In accordance with Law 25, you have the following rights over your personal information:
Right of access: obtain a copy of all information we hold about you.
Right to rectification: have inaccurate, incomplete, or ambiguous information corrected.
Right to portability: receive your computerized personal information in a structured, commonly used technological format (CSV, JSON), or have it transmitted directly to another organization of your choice authorized to receive it.
Right to withdraw consent: withdraw your consent at any time, free of charge, for any non-essential purpose.
Right to deletion ("right to be forgotten"): request that your information be deleted, subject to our legal retention obligations.
Right to de-indexing: in certain situations, request de-indexing of information about you accessible via a search engine.
Right to information about automated decisions: if a decision concerning you is made exclusively on the basis of automated processing, be informed of the reasoning and main factors involved.
To exercise a right, write to privacy@lumos.property. We will respond within a maximum of 30 days.
If our response is unsatisfactory, you may file a complaint with the Commission d'accès à l'information du Québec: www.cai.gouv.qc.ca.
Minors
Our services are intended for adult professionals and are not designed for persons under 18 years of age. We do not knowingly collect information from minors under 14 without the consent of a parent or guardian.
Changes to This Policy
We may modify this policy to reflect changes in our practices, the law, or our providers. In the event of a significant change, we will:
- Post the new policy on this page
- Update the "Last updated" date
- Notify you by email if you are registered on our waitlist or beta program
Continued use of our services after a change constitutes acceptance of the new policy.
Contact Us
Lumos Intégrité Inc. 804, rue Alfred-Laliberté Mont-Saint-Hilaire (Quebec) J3H 5M6 Canada
Privacy questions: privacy@lumos.property General questions: info@lumos.property
Lumos Intégrité Inc. is the owner of Lumos Inspection, Lumos Clarity, and Lumos Property Health.