Privacy policy

Effective date: October 20, 2026
Last updated: October 20, 2026

1. Who we are

This website, lumesurge.com, is operated by LumeSurge Ltd. ("LumeSurge", "we", "us"), based in Mississauga, Ontario, Canada.

Privacy contact: info@lumesurge.com

2. What this policy covers

This policy explains what personal information we collect through lumesurge.com, why, who handles it, and the choices you have. It applies to visitors to the site and to people who submit one of our forms.

It does not cover the work we do for clients under a separate written agreement.

3. What we collect

Information you give us through our forms

We have three forms:

• Contact form: your email address, and optionally what you make or sell, your website and a message.
• Free AI Snapshot request: your business type and email address, and optionally your company, website and name.
• Blog notification sign-up: your email address only.

With each submission we also store:

• the page you submitted from,
• the exact consent wording shown next to the checkbox, and the date and time you agreed,
• a one-way scrambled version of your IP address (a hash that cannot be turned back into the address) used to limit spam and repeated submissions,
• your browser's user agent text (browser and device type).

We do not store your raw IP address in our lead records.

Information collected automatically

• Analytics (only if you accept): if you click Accept on the cookie banner, we load Google Analytics 4. It uses cookies and similar technology to report on how the site is used, such as pages viewed and approximate location. We use it for site usage statistics, and Google may also use the data for ad personalization (see below). If you click Reject, or do nothing, Google Analytics does not load.
• Your choice on the banner: we remember your Accept or Reject choice in your browser's local storage on your device.
• Hosting records: our hosting provider keeps standard server logs, which can include IP address, requested page, and browser type, for security and operations.
• Security reports: our site may receive browser security reports (for example when a script is blocked). We write a short log line for each and do not keep them as a record about you.

Our Google Analytics property has Google's ads personalization features enabled. This means data collected through Google Analytics, once you accept analytics, may be used by Google for ad personalization under Google's own terms. You can opt out in your Google Ads Settings (adssettings.google.com), or by clicking Reject on our banner so Google Analytics never loads.

4. Why we use it

• To reply to your message or request.
• To prepare and send your free AI Snapshot, if you ask for one.
• To email you when new posts are published, if you sign up. You can stop at any time.
• To keep the site secure and limit spam and abuse.
• To understand how the site is used and improve it, but only if you accept analytics.
• To keep a record of your consent.

We do not use your information to make automated decisions about you.

5. Consent and how to withdraw it

We ask for your consent before we contact you through a form and before we load analytics.

• Contact and Snapshot forms: you agree to be contacted about your enquiry.
• Blog notifications: you agree to receive an email when new posts are published. We currently save your sign-up. Every notification email we send will include a working unsubscribe link and our identity and contact details.
• Analytics: you can change your choice by clearing this site's stored data in your browser, which shows the banner again.

To withdraw consent or ask us to stop, email info@lumesurge.com. We act on unsubscribe requests within 10 business days.

6. Who handles your information

We use these service providers to run the site and the forms:

They handle information for us under their own terms and privacy commitments. We do not sell the personal information we collect.

We may disclose information if the law requires it.

7. Where information is processed

Some providers may process information outside Canada, including in the United States. Information held in other countries may be accessible to courts, law enforcement and national security authorities under the laws of those countries.

8. How long we keep it

• Form submissions and consent records: kept only as long as needed to respond to you, keep a record of your consent, and meet our legal obligations, then deleted or anonymized
• Blog sign-ups: until you unsubscribe, after which we keep only what is needed to honour your unsubscribe request
• Analytics data: kept for 14 months in Google Analytics
• Server logs: per our hosting provider's standard retention

9. Your rights

Under Canadian privacy law you can ask to:

• see the personal information we hold about you,
• correct it,
• withdraw your consent,
• ask us to delete it, where the law allows.

Email info@lumesurge.com. We may need to confirm who you are first. We will respond within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10. Security

We limit access to the form database to our server, keep it behind access controls, and hash IP addresses. No system is perfectly secure, and we cannot guarantee the security of information sent over the internet.

11. Children

This site is for businesses and is not directed at children. We do not knowingly collect information from anyone under 16.

12. Cookies

13. Links to other sites

The site links to other sites, such as LinkedIn. Their privacy practices are their own.

14. Changes

If we change this policy, we will post the new version here and update the date above.

15. Contact

LumeSurge Ltd.
2222 South Sheridan Way, Unit 116, Mississauga, Ontario L5J 2M4
info@lumesurge.com