1. Who this policy covers
This policy applies to CodeLuma Development ("CodeLuma Development", "we", "us", or "our") and the personal information we handle through our website, project discussions, support tickets, client workspaces, email, and other business communications. It is written for clients, prospective clients, project collaborators, site visitors, and people who contact us.
2. Information we may collect
The information depends on how you interact with us. It can include:
- Contact and business details such as name, email address, telephone number, company, role, and communication preferences.
- Inquiry and support-ticket information, including the issue, project context, attachments, screenshots, browser or device details you choose to provide, and correspondence about the ticket.
- Project information, including requirements, files, feedback, approved content, user roles, implementation decisions, and records needed to deliver, maintain, or support a project.
- Account and security records needed to operate a client area or protect access, such as authentication events, account identifiers, and session information.
- Business and transaction records connected to an estimate, agreement, invoice, payment, or legally required record.
- Limited technical information used to secure and operate the website, such as IP address, browser type, pages requested, and server or security logs.
3. Why we use information
We use information to respond to requests; provide estimates and services; open, investigate, and resolve support tickets; communicate project status; administer accounts; protect our systems; document approvals and work performed; meet accounting, tax, contractual, and legal obligations; and improve our services. We use marketing contact details only where permitted by law and with the consent or other lawful basis required for that communication.
4. Support tickets and project records
A support ticket can become part of a project record when it documents a request, decision, incident, change, or maintenance activity. Access is limited to people who need the information to provide support, manage the relationship, or protect the systems involved. If you submit information about another person, you are responsible for having authority to do so and for providing only what is necessary.
5. Consent, choice, and limits
We identify the purpose of collection before or at the time we collect information and seek meaningful consent where required. You may withdraw consent for non-essential uses on reasonable notice, subject to legal or contractual limits. Withdrawing consent may affect our ability to provide a requested service or respond to a particular ticket. We limit collection, use, disclosure, and retention to what is reasonable for the purposes described here or otherwise communicated to you.
6. Sharing and service providers
We do not rent or sell personal information. We may share it with employees, contractors, professional advisers, or service providers that need it to provide hosting, email, security, backup, payment, communication, development, or support services for us or a client project. We require appropriate confidentiality and security commitments and limit their use to the services they perform. Information may be processed in Canada or another jurisdiction where a supplier operates; it may then be subject to the laws of that jurisdiction. We may also disclose information when required or permitted by law, to protect people or systems, or in connection with a business transaction where lawful safeguards are used.
7. Security, accuracy, and retention
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, role-based handling, secure transmission where available, and practices designed to reduce unauthorized access, loss, misuse, or disclosure. No system is risk-free. We retain information only as long as reasonably needed for the identified purpose, the client relationship, operational support, dispute resolution, backup cycles, or legal and accounting obligations. When information is no longer required, we securely delete, de-identify, or otherwise dispose of it in a manner appropriate to the context.
8. Your access and correction rights
You may ask what personal information we hold about you, how it has been used or disclosed, and request correction of information that is inaccurate or incomplete. Submit a ticket through our Support Centre with the subject line "Privacy Request." We may ask for information needed to verify identity and will respond within the timeframe required by applicable law, subject to lawful exceptions.
9. Cookies and this notice
We use necessary technical cookies or similar technologies to operate secure sessions and remember selected site preferences. The privacy-notice acknowledgement is stored in a first-party cookie for 30 days so that the notice does not interrupt every visit. It is not used for advertising profiling. If we add non-essential analytics, advertising, or similar technologies, we will describe them and request consent where required.
10. Legal framework and questions
For commercial activities, this policy is intended to align with the principles of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), including accountability, identified purposes, consent, limits on collection and use, safeguards, access, and a process for concerns. Nova Scotia consumer-protection rights and other applicable laws continue to apply and are not limited by this policy.
If you have a concern, start with a Privacy Request through the Support Centre so we can investigate. You may also have the right to contact the Office of the Privacy Commissioner of Canada.
11. Updates to this policy
We may update this policy when our services, systems, or legal obligations change. The effective date above shows the current version. For a material change, we will take reasonable steps to provide a more prominent notice where appropriate.
