Privacy Policy

Last Updated: January 19, 2026

We're pretty serious about keeping your information safe. Here's the full breakdown of how we handle your data when you work with us.

Privacy Protection
Quick Note: As a Canadian law firm, we follow PIPEDA (Personal Information Protection and Electronic Documents Act) along with provincial privacy laws. Your data stays in Canada unless you explicitly authorize otherwise.

Introduction

Look, we get it—nobody really enjoys reading privacy policies. But since we're lawyers who help businesses navigate digital commerce and data compliance, we figured we'd better practice what we preach.

When you reach out to Luminex Signal Legal for corporate law services, contract help, or any of our other practice areas, you're trusting us with sensitive information. We don't take that lightly. This policy explains what info we collect, why we need it, and how we keep it safe.

Whether you're a startup founder, an established business, or someone dealing with a digital commerce question, you've got the right to know exactly what happens with your data. So let's break it down in plain English.

Information We Collect

Personal Identification Info

When you contact us or become a client, we'll typically collect:

  • Your name and preferred way to address you
  • Email address and phone number
  • Business name and position (if applicable)
  • Mailing address—both personal and business
  • Billing information for invoicing purposes
Case-Related Information

Depending on what you need help with, we might also need:

  • Corporate documents and business structure details
  • Financial records relevant to your legal matter
  • Contracts, agreements, or other legal docs you want us to review
  • Intellectual property materials—trademarks, patents, copyrights
  • Details about disputes or regulatory issues you're facing
Attorney-Client Privilege: Everything you share with us in a legal capacity is protected by solicitor-client privilege under Canadian law. We take this seriously—your confidential info stays confidential.
Technical Data

Our website automatically collects some technical stuff:

  • IP address and general location (city-level, not your exact coordinates)
  • Browser type and device information
  • Pages you visit and how long you stick around
  • Referring websites that sent you our way
  • Date and time stamps of your visits

How We Use Your Information

We're not in the business of selling your data or spamming you with junk. Here's what we actually do with your information:

Legal Services Delivery

Providing the corporate law, contract drafting, IP protection, and other legal services you've hired us for. Pretty straightforward.

Client Communication

Keeping you updated on your matters, answering questions, and making sure we're on the same page about your case.

Documentation & Records

Maintaining proper legal files and documentation as required by the Law Society and good practice standards.

Billing & Invoicing

Processing payments, sending invoices, and keeping financial records straight (because accountants get cranky otherwise).

Legal Compliance

Meeting our obligations under PIPEDA, Law Society rules, anti-money laundering regulations, and other legal requirements.

Service Improvement

Analyzing how we can serve clients better and making our processes more efficient. We're always tweaking things.

We won't use your personal info for marketing unless you've explicitly opted in. And if you do opt in, you can always change your mind later—no hard feelings.

When We Share Your Data

We don't sell or rent your personal information. Period. But there are some situations where we need to share data with others:

Service Providers

We work with trusted third parties who help us run our practice:

  • Cloud storage providers for secure document management
  • Payment processors for billing (they never see your full card details—that's tokenized)
  • IT support and cybersecurity firms who help keep our systems locked down
  • Professional consultants (accountants, tech experts) when needed for your case

All these folks are bound by strict confidentiality agreements and can only use your data to help us serve you.

Legal Requirements

Sometimes the law requires us to disclose information:

  • Court orders or subpoenas (we'll notify you if possible)
  • Law Society audits or regulatory investigations
  • Anti-money laundering reporting obligations
  • To prevent fraud or protect someone's safety
With Your Permission

If your case involves opposing counsel, co-counsel, expert witnesses, or other parties, we'll share relevant info as needed to represent you effectively. This is standard legal practice, but we'll always keep you in the loop about who needs to know what.

Data Location: Your information is stored on Canadian servers unless you've specifically authorized international transfers. If we need to use foreign service providers, we'll ensure they meet Canadian privacy standards through appropriate contractual safeguards.

Cookies & Tracking Technologies

Yeah, we use cookies—but not the delicious kind. These are small text files that help our website work better and remember your preferences.

Types of Cookies We Use
Cookie Type Purpose Duration
Essential Cookies Keep the site functioning—login sessions, security features, etc. These are non-negotiable. Session / 1 year
Analytics Cookies Help us understand how people use the site so we can make it better. We use privacy-focused analytics. 2 years
Preference Cookies Remember your settings and preferences for a smoother experience next time you visit. 1 year
Security Cookies Detect suspicious activity and protect against attacks. Pretty important for a law firm. Session

You can manage your cookie preferences anytime using the button below or in your browser settings. Just know that blocking certain cookies might make the site less functional.

How We Protect Your Information

Security isn't just a checkbox for us—it's kinda our whole thing. We implement multiple layers of protection:

Encryption

All data transmitted to and from our site uses TLS encryption. Documents are encrypted at rest on our servers.

Access Controls

Multi-factor authentication, role-based access, and strict authorization protocols. Not everyone sees everything.

Secure Infrastructure

Canadian-based cloud servers with regular security audits, backups, and disaster recovery plans in place.

Privacy by Design

We collect only what we need and keep it only as long as necessary. Minimal data exposure is the goal.

Monitoring

24/7 security monitoring, intrusion detection systems, and regular vulnerability scans to catch issues early.

Staff Training

Our team undergoes regular cybersecurity and privacy training. Human error is often the weakest link—we address that.

Breach Notification: In the unlikely event of a data breach affecting your personal information, we'll notify you and the Privacy Commissioner as required by law. We've got incident response protocols ready to go.

Your Privacy Rights

Under Canadian privacy law (PIPEDA and provincial legislation), you've got some solid rights when it comes to your personal data:

You can request a copy of the personal information we hold about you. We'll provide it within 30 days (might take a bit longer for complex requests, but we'll let you know).

If any information we have is wrong or outdated, you can ask us to correct it. We'll update our records and notify anyone we've shared that info with (where appropriate).

You can request deletion of your personal data, with some exceptions (like if we're legally required to keep certain records, or if it's needed for ongoing legal matters). We'll explain if we can't delete something.

If you've consented to certain uses of your data (like marketing communications), you can withdraw that consent anytime. Just note that this won't affect processing that already happened before you withdrew.

You can request your data in a structured, commonly used format so you can transfer it to another service provider if needed. We'll provide it in PDF or another reasonable format.

If you think we've mishandled your personal information, you can file a complaint with the Office of the Privacy Commissioner of Canada. We'd prefer you talk to us first so we can try to sort it out, but the choice is yours.

To exercise any of these rights, just reach out to our Privacy Officer using the contact info at the bottom of this page. We'll verify your identity (for security reasons) and handle your request promptly.

Data Retention Periods

We don't keep your info forever—that'd be weird and unnecessary. Here's our general approach:

  • Client Files: We're required by the Law Society to maintain client files for at least 10 years after the matter closes. This protects both you and us in case questions come up later.
  • Financial Records: Billing and payment info is kept for 7 years to comply with tax and accounting regulations.
  • Marketing Contacts: If you've signed up for newsletters or updates but aren't a client, we'll keep your contact info until you unsubscribe. We periodically clean out inactive contacts anyway.
  • Website Analytics: Anonymized usage data is retained for up to 2 years for statistical purposes.
  • Security Logs: Access logs and security monitoring data are kept for 1 year unless there's an active investigation.

After these periods expire, we securely delete or anonymize the data. For physical documents, that means shredding. For digital files, secure deletion protocols that make recovery impossible.

Active Matters: If you've got an ongoing case or relationship with us, we'll keep relevant data until the matter is resolved and the retention period starts. Makes sense, right?

Third-Party Links & Services

Our website might include links to other sites—legal resources, industry publications, partner services, etc. Once you click through to another site, this privacy policy doesn't apply anymore.

We try to only link to reputable sources, but we can't control their privacy practices. It's a good idea to check out their privacy policies before sharing any personal info over there.

Same goes for any social media platforms we're on. When you interact with us on LinkedIn, Twitter, or wherever, those platforms have their own data collection and privacy policies that govern what happens there.

Changes to This Policy

Privacy law evolves, technology changes, and our practices might shift over time. When we update this policy, we'll post the new version here with a revised "Last Updated" date at the top.

For minor tweaks (fixing typos, clarifying language, adding examples), we'll just update the page. If we make significant changes that affect how we handle your data, we'll notify current clients directly via email.

It's worth checking back here occasionally to stay in the loop, especially if it's been a while since you last looked. We'll try to keep the changes reasonable and transparent.

Contact Our Privacy Officer

Got questions about this privacy policy or how we handle your data? Want to exercise one of your privacy rights? We're here to help.

Privacy Officer

Luminex Signal Legal
Corporate Compliance Department

Email

contact@luminexsignal.info
Subject: Privacy Request

Phone

(416) 789-5521
Mon-Fri, 9 AM - 5 PM EST

Mailing Address

1250 Bay Street, Suite 800
Toronto, ON M5R 2A5
Canada

Response Time: We aim to respond to all privacy inquiries within 3-5 business days. For formal access requests, we'll acknowledge receipt immediately and provide a full response within 30 days as required by law.

Verification: To protect your privacy, we'll need to verify your identity before processing certain requests. Have your client reference number or recent correspondence handy if you've got it.

External Resources:

Thanks for reading through all that. Seriously—most people don't.

Back to Home