Privacy Policy

Your privacy matters to us - here's how we handle your information

Last Updated: January 15, 2026

1. Introduction

Look, we get it - nobody actually enjoys reading privacy policies. But since you're dealing with legal matters, you probably care more than most about how your info gets handled. So we've tried to make this as straightforward as possible.

Luminar Chord Legal Services operates in full compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We take this stuff seriously because, well, we're lawyers - it's kinda our thing.

This policy explains what information we collect when you interact with our firm, why we need it, who might see it, and what rights you've got when it comes to your personal data. We've worked with plenty of clients on their own privacy compliance, so we know the importance of getting this right.

2. Information We Collect

When you reach out to us or become a client, you'll typically share:

  • Contact details: Name, business name, email, phone number, mailing address
  • Professional information: Job title, company info, industry sector
  • Legal matter details: Information about your business needs, contracts, disputes, or other legal issues
  • Financial information: Billing details, payment methods (though we don't store full credit card numbers)
  • Communication records: Emails, letters, meeting notes, phone call summaries
  • Documents: Contracts, corporate records, correspondence, evidence - basically anything relevant to your matter

Our website picks up some technical stuff automatically:

  • Usage data: Pages visited, time spent, navigation patterns
  • Device info: Browser type, operating system, screen resolution
  • IP address: Your internet connection's identifier
  • Cookies: Small files that help the site function (more on this in Section 7)

Sometimes we'll receive information about you from other sources, like opposing counsel, court registries, corporate registries, credit agencies (for larger matters), or professional references. We only collect what's necessary for providing legal services.

3. How We Use Your Data

We're not in the business of collecting data for fun. Here's what we actually do with it:

Legal Services Delivery

Representing you, providing advice, drafting documents, handling negotiations, managing litigation - y'know, actual legal work.

Client Management

Maintaining your file, tracking deadlines, managing conflicts of interest, keeping communication records.

Billing & Accounting

Sending invoices, processing payments, maintaining financial records as required by law society rules.

Compliance & Ethics

Meeting Law Society of Ontario requirements, preventing conflicts, complying with anti-money laundering rules.

Communication

Responding to inquiries, providing updates, sending relevant legal information (only stuff you'd actually want to hear about).

Service Improvement

Understanding how clients use our services, improving our website, making our processes more efficient.

Legal Basis: We process your information based on contractual necessity (to provide legal services), legal obligations (law society rules, court requirements), legitimate interests (running our practice efficiently), and your consent where required.

4. Disclosure Practices

We don't go around sharing your info willy-nilly. Solicitor-client privilege is a real thing, and we take it seriously. But there are some situations where we might need to share information:

Obviously, when you tell us to share something - like sending documents to the other side in a negotiation, filing materials with a court, or coordinating with other professionals you've hired (accountants, consultants, etc.).

We work with vetted service providers who help us run the practice: secure cloud storage, document management systems, accounting software, IT support, court reporting services. These folks are bound by confidentiality agreements and only get access to what they absolutely need.

When the law demands it - court orders, subpoenas, regulatory investigations, Law Society inquiries. We'll let you know when this happens unless we're legally prohibited from doing so.

In rare cases, we might need to disclose information to prevent serious harm or comply with anti-money laundering reporting requirements. These situations are governed by strict professional rules and happen very infrequently.

5. Data Retention

Here's the deal with how long we keep your stuff:

Type of Information Retention Period Reason
Active Client Files Duration of matter + minimum 10 years Law Society requirements, limitation periods, potential claims
Financial Records 7 years minimum CRA requirements, accounting rules
Conflict Check Info Indefinitely (anonymized where possible) Ongoing ethical obligation to check conflicts
General Inquiries 2 years Business records, potential follow-up
Website Analytics 26 months Understanding site usage patterns
Marketing Consent Until withdrawn or 3 years of inactivity CASL compliance

When we don't need information anymore, we destroy it securely - shredding physical documents, wiping digital files. But keep in mind that some information needs to be kept longer due to professional rules that apply to law firms.

6. Your Rights

Under PIPEDA and other privacy laws, you've got some important rights when it comes to your personal information:

You can request copies of the personal information we hold about you. We'll provide this within 30 days (though complex requests might take a bit longer). Note that we might need to redact information protected by solicitor-client privilege involving other parties.

If something's wrong or outdated, let us know and we'll fix it. For client files, we might need to make a correction note rather than deleting the original (to maintain file integrity), but you'll see both versions.

Where we're processing information based on consent (like marketing communications), you can withdraw that consent anytime. Just know that we might still need to keep certain info due to legal or professional obligations.

If you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner of Canada. We'd prefer you reach out to us first though - we'll do our best to sort things out.

To exercise any of these rights, shoot us an email at contact@luminarchord.info or call (416) 789-2340. We'll need to verify your identity first - standard security stuff.

7. Cookie Policy

Yeah, we use cookies - not the delicious kind, unfortunately. Here's what they do and how to manage them:

Essential Cookies

These keep the site working properly - security features, session management, basic functionality. Can't really turn these off without breaking stuff.

Always Active
Analytics Cookies

Help us understand how people use the site - what pages are popular, where folks get stuck, that kind of thing. No personal identification.

Optional
Preference Cookies

Remember your choices - language preferences, accessibility settings, whether you've seen certain notices before.

Optional
Security Cookies

Detect suspicious activity, prevent fraud, keep client portal access secure. Pretty important for a law firm's website.

Always Active
Manage Your Preferences

You can control cookie settings through your browser or using our preference center:

8. Security Measures

We take security pretty seriously - comes with the territory of handling sensitive business and legal matters. Here's what we do to keep your info safe:

Encryption

All data transmitted to and from our systems uses TLS encryption. Client files are encrypted at rest.

Access Controls

Multi-factor authentication, role-based permissions, regular access reviews. Only authorized personnel see your files.

Secure Infrastructure

Canadian data centers, regular backups, firewall protection, intrusion detection systems.

Staff Training

Regular privacy and security training for all team members. Confidentiality agreements with everyone who works here.

Physical Security

Secure office access, locked filing cabinets, clean desk policy, visitor protocols.

Regular Updates

Software patches, security audits, penetration testing, incident response planning.

Breach Notification

In the unlikely event of a data breach that poses a real risk of significant harm, we'll notify affected individuals and the Privacy Commissioner as required by law. We'll be upfront about what happened, what information was involved, and what we're doing about it.

9. Third-Party Services

We work with some third-party services to run our practice efficiently. All of these are carefully vetted and bound by strict confidentiality agreements:

Practice Management Software
Canadian-hosted

Manages client files, deadlines, billing. Data stored in Canada with encryption.

Document Storage & Management
SOC 2 Certified

Secure cloud storage with Canadian data residency options, bank-level encryption.

Email & Communication Tools
Encrypted

Business-grade email with encryption, secure video conferencing for client meetings.

Payment Processing
PCI Compliant

Third-party payment processors handle credit card info - we don't store full card numbers.

Website Analytics
Anonymized

Basic usage statistics to improve our site. No personal identification, IP addresses anonymized.

These service providers only access information necessary to perform their specific functions. They can't use your data for their own purposes and must maintain the same level of security we do.

10. Changes to This Policy

Privacy laws evolve, our practices improve, technology changes - so this policy might need updates from time to time. When we make changes:

  • We'll update the "Last Updated" date at the top of this page
  • For minor tweaks (typo fixes, clarifications), we'll just post the updated version
  • For significant changes, we'll notify active clients directly via email
  • We'll keep previous versions archived if you want to see what changed

It's worth checking back here occasionally, especially if you haven't in a while. We try to make updates clear and easy to understand - no sneaky fine print changes.

11. Contact Us

Questions about this privacy policy? Concerns about how we're handling your information? Want to exercise any of your privacy rights? Get in touch:

Office Address

Luminar Chord Legal Services
1450 Bay Street, Suite 820
Toronto, ON M5R 3L5
Canada

Privacy Officer

Email: contact@luminarchord.info
Phone: (416) 789-2340

We'll respond to privacy inquiries within 30 days.

External Privacy Resources

If you're not satisfied with our response or want to learn more about privacy rights in Canada:

Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376

Law Society of Ontario
Website: lso.ca
Phone: (416) 947-3300

Thanks for Reading

We know privacy policies aren't exactly thrilling reading, but understanding how your information is handled matters - especially when you're dealing with legal stuff. If anything's unclear or you've got questions, don't hesitate to reach out.

Get in Touch