This Privacy Policy describes the practices and procedures of LuluBuy, operated by Lulu Buy Inc. (referred to herein as the Company, we, us, or our), regarding the collection, use, disclosure, and protection of information obtained from individuals who access or use our website located at https://www.lulubuy.mom (the Site) and any related services offered by the Company (collectively, the Services). The Company is a provider of computer systems design and related services operating within the Professional, Scientific, and Technical Services sector. We are committed to safeguarding the privacy of all individuals who interact with our platform. This policy explains what information we gather, how we utilize it, the circumstances under which we may share it with third parties, and the measures we implement to protect your data. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms. If you do not agree with any part of this policy, please discontinue use of our Services immediately.
Lulu Buy Inc. operates as a computer systems design and integration firm headquartered at 536 Gordon Baker Road, North York, M2H 3B4, Canada. This Privacy Policy applies to all information collected through the Site, any mobile applications, electronic communications, and any other interactions you may have with the Company in connection with the Services. It covers both personally identifiable information and non-personally identifiable information gathered during your engagement with our platform.
The scope of this policy extends to visitors browsing the Site, prospective clients submitting inquiries, current clients utilizing our services, and any other individuals whose data may be processed through our systems. We have designed this policy to comply with applicable privacy laws and regulations, including but not limited to the Personal Information Protection and Electronic Documents Act of Canada, relevant provincial privacy legislation, and, where applicable, the General Data Protection Regulation of the European Union.
We encourage you to read this document carefully and contact us with any questions. This policy forms part of our broader commitment to transparency and accountability in how we handle personal data. The Company reserves the right to modify this Privacy Policy at any time, and such modifications will take effect immediately upon posting to the Site. Your continued use of the Services after any changes constitutes acceptance of the revised policy.
The Company collects several categories of information to provide and improve the Services. The information we collect falls broadly into two categories: information you provide directly to us and information collected automatically through your use of the Site.
Information you provide directly includes, but is not limited to, your name, email address, telephone number, company name, job title, physical mailing address, and any other details you choose to submit through our contact forms, registration processes, email correspondence, or telephone conversations. When you communicate with us regarding a project inquiry or support request, we may retain records of that communication, including any files or documents you attach.
Information collected automatically includes technical data such as your Internet Protocol address, browser type and version, operating system, device type, referring and exit pages, date and time of visit, pages viewed, time spent on each page, clickstream data, and other diagnostic information. We also collect information about how you interact with the Site through the use of cookies, web beacons, and similar tracking technologies as described in Section 6 of this policy. This automatic collection helps us understand usage patterns, improve performance, and enhance the user experience.
We do not collect sensitive personal data such as government-issued identification numbers, financial account credentials, biometric data, health information, or information about criminal convictions unless such collection is strictly necessary for a specific service we are providing and you have given explicit consent.
The Company employs multiple methods to gather the information described above. Direct collection occurs when you voluntarily submit information through forms on our Site, send us emails, contact us by telephone, or engage with us during consultations and project meetings. We may also receive information about you from third-party sources, such as business partners, analytics providers, advertising networks, and publicly available databases, in accordance with applicable law.
Automated collection methods include the deployment of cookies, server logs, and other digital tracking mechanisms. When you visit the Site, our servers automatically record information that your browser transmits. This includes data elements such as your IP address, the type of browser and operating system you use, the pages you view, the links you click, and the duration of your visit. We use this data for system administration, security monitoring, and to compile aggregate statistics about Site traffic and usage trends.
We may also receive information from third-party service providers who assist us with operations such as hosting, analytics, email delivery, and customer relationship management. These providers are contractually obligated to handle your data in compliance with this Privacy Policy and applicable law. We take reasonable steps to verify that any third party from whom we receive personal data has obtained it lawfully and has provided appropriate notice and obtained necessary consents for its transfer to us.
The Company uses the information we collect for a variety of business purposes, all aimed at delivering and enhancing the Services. Primarily, we use your information to respond to your inquiries, fulfill your requests for services, process transactions, and manage our ongoing relationship with you. When you contact us with a project proposal or support issue, we use your contact details and the substance of your communication to provide a timely and relevant response.
We also use collected information to improve and personalize the Site experience, to analyze usage patterns and trends, to develop new features and services, and to conduct internal research and development. Aggregate and anonymized data derived from collected information may be used for statistical reporting, market analysis, and business planning without identifying individual users.
For marketing and communication purposes, we may use your email address to send you newsletters, service updates, promotional materials, and information about our products and events, provided you have given your consent where required by law. You may opt out of receiving marketing communications at any time by following the unsubscribe instructions included in each email or by contacting us directly using the details provided in Section 14.
Additionally, the Company may use collected information to enforce our terms of service, to protect the rights and safety of the Company and its users, to detect and prevent fraud or other illegal activities, and to comply with legal obligations and regulatory requirements.
The Company does not sell, rent, or lease your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances, and only to the extent necessary to fulfill the purpose for which it is shared.
We may disclose information to trusted third-party service providers who perform functions on our behalf, including but not limited to web hosting, data storage, analytics processing, email delivery, payment processing, and customer support services. These providers are granted access to personal data only as necessary to perform their designated functions and are contractually bound to maintain the confidentiality and security of that data. They are not authorized to use your information for any purpose other than providing services to the Company.
We may also share information in connection with a corporate transaction, such as a merger, acquisition, consolidation, asset sale, or reorganization. In such an event, the acquiring entity or successor organization will assume the rights and obligations described in this Privacy Policy with respect to the personal data transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
Finally, we may disclose information when required to do so by law, court order, or governmental regulation, or when we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request. We will make reasonable efforts to notify you of such disclosure where permitted by law.
The Site uses cookies and similar tracking technologies to enhance your browsing experience and to collect information about how you use our platform. A cookie is a small text file that is stored on your device by your web browser. Cookies enable us to remember your preferences, analyze Site traffic, personalize content, and serve relevant advertisements. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device until they expire or are deleted.
The types of cookies we deploy include essential cookies, which are necessary for the Site to function properly; performance and analytics cookies, which help us understand how visitors interact with the Site by collecting and reporting aggregated information; functional cookies, which allow the Site to remember choices you make, such as your language preference or login details; and targeting or advertising cookies, which may be set through our Site by advertising partners to build a profile of your interests.
You have the ability to control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being placed on your device. Please note that if you disable or block cookies, certain features of the Site may not function as intended, and your browsing experience may be diminished. For more detailed information about managing cookies, please refer to the help documentation of your specific web browser.
We may also use web beacons, pixel tags, and similar technologies embedded in emails and web pages to track whether communications have been opened and whether links have been clicked. These tools help us measure the effectiveness of our communications and improve our outreach strategies.
The Company takes the security of your personal information seriously and has implemented a range of technical, administrative, and physical safeguards to protect against unauthorized access, alteration, disclosure, or destruction of data under our control. These measures are designed to provide a level of security appropriate to the sensitivity of the information we hold.
Technical safeguards employed by the Company include the use of encryption protocols for data transmission, such as Transport Layer Security for data in transit, and encryption for sensitive data at rest. Our network infrastructure is protected by firewalls, intrusion detection and prevention systems, and regular vulnerability scanning. Access to production systems and databases is restricted to authorized personnel and enforced through strong authentication mechanisms, including multi-factor authentication where applicable.
Administrative safeguards include regular employee training on data protection best practices, background checks for personnel with access to sensitive systems, documented security policies and procedures, and periodic audits of our security posture. We also maintain incident response protocols to detect, contain, and remediate security breaches promptly. Physical safeguards include controlled access to our offices and data centers, visitor logging, and environmental controls.
Despite these measures, no method of electronic transmission or storage is completely secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee its absolute security. In the event of a data breach that affects your personal information, we will notify you and the relevant regulatory authorities in accordance with applicable law.
The Company retains personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law, regulation, or contractual obligation. The specific retention periods vary depending on the nature of the data and the context in which it was provided.
For client project data, including communications, specifications, deliverables, and related records, we generally retain information for the duration of the client relationship plus a period of seven years following the conclusion of the engagement, to comply with tax, accounting, and legal record-keeping requirements. Contact form submissions and email inquiries from prospective clients are retained for a period of two years from the date of last communication, unless a client relationship is established during that time.
Technical logs, server data, and analytics information are retained for a period of up to twenty-four months, after which they are either aggregated and anonymized or securely deleted. Cookie data and browser-level tracking information are governed by the expiration parameters of the specific cookies deployed and are generally retained for no longer than twelve months from the date of the last visit to the Site.
When personal data is no longer required for the purposes described in this policy, or when you request deletion of your data in accordance with your rights as described in Section 9, we will securely dispose of or anonymize the information using industry-standard data destruction methods, including secure digital wiping and physical destruction of storage media where applicable.
Depending on your jurisdiction of residence, you may have certain rights with respect to the personal information we hold about you. These rights may include the right to access your data, the right to rectify inaccurate or incomplete information, the right to request deletion of your data, the right to restrict or object to processing, the right to data portability, and the right to withdraw consent where processing is based on consent.
If you wish to exercise any of these rights, please contact us using the details provided in Section 14 of this policy. We will respond to your request within the timeframes required by applicable law, generally within thirty days of receipt. To process your request, we may need to verify your identity to prevent unauthorized access to personal data. We may ask you to provide additional information for verification purposes, which will be used solely for that purpose and deleted promptly after verification is complete.
You also have the right to opt out of receiving marketing communications from us at any time. Every marketing email we send includes an unsubscribe link that allows you to remove yourself from our mailing list with a single click. You may also contact us directly to request removal from our marketing lists. Opting out of marketing communications does not affect transactional or service-related emails that are necessary for the provision of our Services, such as invoices, project updates, or security notices.
If you believe that we have not adequately addressed your concerns regarding our handling of your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us first so that we may attempt to resolve your concerns directly.
The Services provided by Lulu Buy Inc. are not directed to individuals under the age of sixteen, and we do not knowingly collect personal information from children. The term children in this context refers to individuals who have not yet reached the age of majority in their jurisdiction of residence or who are under the age of sixteen, whichever is higher.
If we become aware that we have inadvertently collected personal data from a child without verified parental consent, we will take prompt steps to delete that information from our systems. We do not design our Site, marketing materials, or services to appeal to children, and we do not target our outreach efforts toward minors. Our client base consists of businesses and professional organizations, and the nature of our computer systems design services is oriented toward an adult professional audience.
Parents and legal guardians who believe that their child has provided personal information to us through the Site or any other channel are encouraged to contact us immediately using the information in Section 14. We are committed to complying with all applicable laws regarding the protection of privacy for children, including the United States Childrens Online Privacy Protection Act where applicable, and we support the rights of parents to control the online activities of their children.
The Company is headquartered in Canada, and the personal information we collect is primarily stored and processed on servers located in Canada and the United States. By using the Site and providing your information to us, you acknowledge that your data may be transferred to, stored, and processed in countries outside your country of residence, including countries whose data protection laws may differ from those in your jurisdiction.
When we transfer personal data across international borders, we implement appropriate safeguards to ensure that the data receives an adequate level of protection consistent with this Privacy Policy and applicable law. These safeguards may include the use of standard contractual clauses approved by relevant regulatory authorities, adherence to recognized privacy frameworks, and contractual commitments from recipients to protect the data in accordance with the principles set forth in this policy.
For transfers of personal data from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on mechanisms such as the European Commission approved Standard Contractual Clauses, the UK International Data Transfer Agreement, or other legally recognized transfer mechanisms. We take reasonable steps to verify that any third-party recipients of transferred data implement security measures that are at least as protective as those described in this policy.
The Site may contain links to websites, applications, or services that are owned and operated by third parties. This Privacy Policy applies solely to information collected by Lulu Buy Inc. through the Site and our Services. We are not responsible for the privacy practices, content, or security of any third-party websites or services, even if you access them through links on our Site.
We encourage you to review the privacy policies and terms of service of any third-party website you visit. The inclusion of a link to a third-party website on the Site does not constitute an endorsement by the Company of that website or its operator, nor does it imply any association between the Company and the third-party website operator. You access and use third-party websites at your own risk.
The Company may integrate third-party services, such as analytics platforms, payment processors, and cloud hosting providers, into the operation of the Site and Services. These third-party providers have their own privacy policies governing the use of your information. We endeavor to select service providers who maintain privacy practices consistent with our own standards, but we cannot control or assume responsibility for their independent data processing activities.
The Company reserves the right to update or modify this Privacy Policy at any time and for any reason, at our sole discretion. When we make material changes to this policy, we will post the revised version on the Site and update the Last Updated date at the top of this page. We may also provide additional notice of significant changes through other channels, such as email notification to registered users or a prominent notice displayed on the Site.
We encourage you to review this Privacy Policy periodically to remain informed about our information collection, use, and disclosure practices. Changes to this policy are effective immediately upon posting unless otherwise specified. Your continued use of the Site and Services following the posting of any changes constitutes your acceptance of the revised Privacy Policy.
If we intend to use personal data in a manner that is materially different from the purposes described at the time of collection, we will provide you with notice and, where required by law, obtain your consent before doing so. Historical versions of this Privacy Policy may be made available upon request by contacting us using the information provided in Section 14.
If you have any questions, concerns, or requests regarding this Privacy Policy or the data handling practices of Lulu Buy Inc., we encourage you to reach out to us through any of the following channels. We are committed to addressing your privacy concerns promptly and transparently.
You may contact us by email at serve@lulubuy.mom. We monitor this inbox regularly and strive to respond to all privacy-related inquiries within five business days. For urgent matters, you may also reach us by telephone at +12603655572 during regular business hours, Eastern Time.
Written correspondence may be sent to our physical office address: Lulu Buy Inc., 536 Gordon Baker Road, North York, M2H 3B4, Canada. If you are submitting a formal data subject request, we recommend using email to ensure the fastest processing. Please include sufficient detail in your communication so that we may understand and address your inquiry effectively.
For complaints or concerns that you feel have not been adequately resolved through direct communication with us, you may contact the Office of the Privacy Commissioner of Canada or the equivalent data protection authority in your jurisdiction of residence. We fully cooperate with regulatory authorities in the investigation and resolution of privacy complaints.
This Privacy Policy and all matters arising out of or relating to it shall be governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflicts of law principles. Any dispute, claim, or controversy arising from or connected with this Privacy Policy or the collection, use, or disclosure of personal information by the Company shall be subject to the exclusive jurisdiction of the courts located in Toronto, Ontario, Canada.
If any provision of this Privacy Policy is determined by a court of competent jurisdiction to be invalid, illegal, or unenforceable, that provision shall be severed, and the remaining provisions shall continue in full force and effect. The invalidity of any part of this policy shall not affect the validity and enforceability of the remaining parts.
By using the Site and Services, you consent to the processing of your personal information as described in this Privacy Policy, and you agree to resolve any disputes concerning this policy through the applicable legal framework described above. This Privacy Policy constitutes the entire agreement between you and the Company concerning the subject matter of data privacy practices and supersedes all prior or contemporaneous communications and proposals, whether oral or written, between the parties with respect to this subject matter.