Terms & Conditions
A Legal Disclaimer
We never access your internal systems, email accounts, client files, or patient records without your explicit written authorisation. Passive scanning of publicly available domain information does not constitute access to your systems.
Terms & Conditions
Under PIPEDA, Lunima collects and uses personal information based on the following grounds:
-
Consent: By submitting a contact form, requesting a service, or emailing us, you consent to the collection and use of your information as described in this policy. You may withdraw consent at any time (see Section 10).
-
Contractual necessity: When you hire Lunima for a service engagement, processing your contact details and technical information is necessary to deliver the service you have requested.
-
Legitimate business interest: We process aggregated website analytics data to understand how our site is used and how to improve it.
-
Legal obligation: We may retain certain records as required by applicable Canadian law, including tax records and engagement documentation.
How We Use Your Information
We use your information exclusively to provide, support, and improve our services. Specifically:
-
To respond to your enquiries and contact form submissions, typically within 2 business hours.
-
To perform security scans, prepare assessment reports, and deliver service deliverables to you.
-
To provide continuous monitoring reports under Lunima Shield subscriptions.
-
To contact you about your engagement — updates, findings, confirmations, and invoices.
-
To comply with mandatory breach notification obligations if we become aware of a security incident involving your data in our systems.
-
To improve our services based on patterns in aggregated (non-identifiable) usage data.
We do not use automated decision-making or profiling that has a significant effect on individuals.
Who We Share Information With
We use a small number of trusted third-party providers to operate our business. Each processes information only as necessary to provide their specific service to us:
ProviderPurposeData Shared
Wix.comWebsite hosting and contact form submissionName, email, message content from contact forms
Stripe or WavePayment processingBilling name, email (payment card data handled entirely by provider)
Google Workspace / Zoho MailEmail communicationEmail content you send to us
MXToolbox, SecurityHeaders, SSL Labs, HaveIBeenPwnedPublic domain scanning tools used in security assessmentsYour business domain name (public information)
6.2 Legal Requirements
We may disclose your personal information if required to do so by law, court order, or government authority — or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Lunima, our clients, or the public.
6.3 Business Transfers
If Lunima is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.
6.4 With Your Consent
We may share your information with third parties where you have given us explicit permission to do so.