Privacy Policy

Introduction

Lok North America Inc. respects the privacy of every individual who visits our website at www.loknorth.hair. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you interact with our website, services, and communications. By accessing or using our website, you agree to the practices described in this policy. If you do not agree with any part, please discontinue use of our website and services immediately.

Lok North America Inc. is a corporation registered in Quebec, Canada, specializing in computer systems design and related professional, scientific, and technical services, including computer integrated systems design, technology consulting, and IT infrastructure planning. Our registered business address is 2025 rue Michelin, Laval, Quebec H7L 5B7, Canada.

Information We Collect

We collect information to provide, improve, protect, and personalize our services. The information we collect falls into three categories: information you provide directly to us, information we collect automatically during your use of our website, and information we may receive from third-party sources where permitted by applicable law and with appropriate consent where required.

Information You Provide Directly. When you fill out our contact form, send us an email, request a consultation or quotation, subscribe to our mailing list, or otherwise communicate with us, we collect the personal information you voluntarily share. This typically includes your full name, email address, telephone number, company name, job title, industry, and any additional details you include in your message or inquiry. We use this information exclusively to respond to your request, provide the services you inquire about, and maintain accurate records of our communications for quality assurance and client service improvement.

Information Collected Automatically. When you browse loknorth.hair, our servers and analytics providers automatically record certain technical data. This includes your Internet Protocol (IP) address, browser type and version, operating system platform, referring and exit URLs, pages visited and the order of those visits, the date and time of each request, your session duration, clickstream data, and similar diagnostic information. We use this automatically collected data to analyze usage trends, diagnose technical issues, administer our site, improve performance, and enhance the overall user experience.

Cookies and Similar Technologies. Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to analyze site traffic, remember user preferences, and improve functionality. Cookies are small text files that your browser stores on your device. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a defined period or until you delete them. You can manage your cookie preferences and settings through your browser controls at any time. Please note that disabling certain cookies may affect the functionality and features of our website.

How We Use Your Information

We use the personal information we collect for the following legitimate business purposes:

• To provide, operate, and maintain our website and all associated services
• To respond to your inquiries, support requests, and communications in a timely and professional manner
• To send administrative communications, including updates to this Privacy Policy, our Terms of Service, and service-related notifications
• To improve our website, content, and services based on user behavior and direct feedback
• To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
• To comply with applicable legal obligations, regulatory requirements, and lawful requests from public authorities in Canada and other applicable jurisdictions
• To enforce our Terms of Service and protect our legal rights, property, and interests
• To personalize your browsing experience and deliver content relevant to your interests and industry
• To conduct internal research, business analytics, and service development activities
• To generate aggregated and anonymized data for statistical and analytical reporting

Legal Basis for Processing

We process your personal data based on the following legal grounds under applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada and the General Data Protection Regulation (GDPR) where applicable:

• Consent. You have provided clear, informed consent for us to process your personal data for a specific purpose, such as receiving marketing communications. You have the right to withdraw your consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
• Contractual Necessity. Processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract, such as preparing a service proposal or statement of work.
• Legal Obligation. Processing is necessary for compliance with a legal obligation to which we are subject, including record-keeping requirements under Canadian corporate and tax laws, and responses to lawful government or regulatory requests.
• Legitimate Interests. Processing is necessary for our legitimate business interests or those of a third party, including operating and improving our services, ensuring network and information security, and conducting ordinary business operations, provided such interests are not overridden by your fundamental rights and freedoms.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for any purpose. We may disclose your information only in the following limited circumstances:

• Service Providers. We may engage trusted third-party companies and individuals to perform functions on our behalf, such as web hosting, email delivery services, customer relationship management platforms, and analytics services. These service providers are granted access to personal information only to the extent necessary to perform their specific functions and are contractually bound to maintain the confidentiality, security, and integrity of your data. They are subject to data processing agreements that comply with Canadian privacy laws and applicable international standards.
• Legal and Regulatory Compliance. We may disclose your personal information if required to do so by applicable law, regulation, legal process, or governmental request, including to comply with Canadian laws and lawful requests from Canadian or foreign public authorities. Where permitted, we will make reasonable efforts to provide you with advance notice of such disclosure.
• Business Transactions. In the event of a merger, acquisition, reorganization, sale of assets, financing, or bankruptcy involving Lok North America Inc., your personal information may be transferred or assigned as part of that transaction. We will provide notice of any change in ownership or control through a prominent notice on our website and outline your choices regarding your information.
• Protection of Rights and Safety. We may disclose your information when we believe in good faith that disclosure is necessary to protect our legal rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• With Your Consent. We may disclose your information for any other purpose with your explicit, informed consent obtained in advance.
• Aggregated and De-Identified Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, business intelligence, and marketing purposes.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Canada where Lok North America Inc. is domiciled and operates, and the United States where certain of our service providers may be located. These countries may have data protection laws that differ from those in your home jurisdiction. When we transfer your personal data across international borders, we implement appropriate safeguards to ensure your information receives an adequate level of protection. These safeguards include entering into standard contractual clauses or equivalent data transfer mechanisms approved by relevant data protection authorities, verifying that recipient organizations maintain adequate data protection measures through due diligence and contractual commitments, and ensuring compliance with applicable cross-border data transfer regulations and frameworks, including Canada's PIPEDA requirements for cross-border data handling.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or regulatory reporting requirements. In determining the appropriate retention period for specific categories of personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data and whether we can achieve those purposes through other means, and applicable legal and regulatory requirements in Canada and other relevant jurisdictions. Specific retention periods vary: contact form submissions and related correspondence are retained for twelve months following the resolution of the associated inquiry; service-related records, project documentation, and contractual records are retained for the duration of the business relationship plus six years as required by applicable Canadian commercial and tax laws; website analytics data is retained in de-identified form for twenty-six months; and billing, accounting, and financial records are retained for seven years in accordance with Canada Revenue Agency requirements. After the applicable retention period, your personal data will be securely deleted, destroyed, or irreversibly anonymized.

Your Rights and Choices

Under applicable Canadian privacy law (PIPEDA) and depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access. You have the right to request access to the personal information we hold about you, subject to limited exceptions under applicable law. We will provide you with a copy of your information and an explanation of how it has been used and with whom it has been shared.
• Right to Rectification. You may request that we correct or update any inaccurate or incomplete personal information we hold about you. We will make reasonable efforts to ensure the accuracy of the data we maintain and will respond to correction requests promptly.
• Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw that consent at any time, subject to legal or contractual restrictions. We will inform you of the implications of withdrawing consent.
• Right to Erasure. You may request that we delete your personal information, subject to certain exceptions such as legal obligations, ongoing business needs, or established legal rights.
• Right to Restrict Processing. You may request that we restrict the processing of your personal data under certain circumstances, such as when you contest its accuracy or the lawfulness of our processing.
• Right to Data Portability. Where technically feasible, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object. You may object to the processing of your personal data for direct marketing purposes at any time, or on grounds relating to your particular situation for other processing activities.
• Right to Lodge a Complaint. You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority if you believe our processing of your personal information violates applicable law.

To exercise any of these rights, please contact us at reach@loknorth.hair. We will acknowledge receipt of your request within five business days and respond substantively within thirty days, or as otherwise required by applicable law. We may need to verify your identity before processing your request to protect your privacy and security.

Data Security

We implement and maintain reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, disclosure, or destruction. Our security measures include encryption of data in transit using Transport Layer Security (TLS) protocols, secure server infrastructure protected by firewalls and intrusion detection systems, regular security assessments and vulnerability testing, strict access controls limiting data access to authorized personnel on a need-to-know basis, mandatory employee training on data protection and privacy practices, written information security policies and incident response procedures, and regular data backups stored in secure, geographically separated locations. While we employ commercially reasonable measures to safeguard your personal information, no method of transmission over the Internet or electronic storage is completely secure. In the event of a data breach that poses a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada or the applicable provincial authority in accordance with Canadian breach notification requirements under PIPEDA without undue delay.

Children's Privacy

Our website and services are not directed to individuals under the age of eighteen, and we do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data without verifiable parental or guardian consent, we will take prompt steps to delete that information from our systems. If you are a parent or guardian who believes your child may have provided personal information to us, please contact us immediately at reach@loknorth.hair so that we can investigate and take appropriate action.

Third-Party Links and Services

Our website may contain links to third-party websites, plugins, widgets, or external services that are not owned or controlled by Lok North America Inc. We provide these links for your convenience and reference only. We do not endorse, control, or assume any responsibility or liability for the content, privacy practices, security practices, terms of service, or data handling policies of any third-party websites or services. We strongly encourage you to review the privacy policies and terms of service of every website you visit and every third-party service you interact with, as their practices may differ significantly from ours. Your interactions with any third-party website or service are solely between you and the applicable third party.

Canadian Privacy Rights

As a Canadian corporation, Lok North America Inc. is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to know why an organization collects, uses, or discloses your personal information; to expect the organization to collect, use, or disclose your personal information reasonably and appropriately and not use it for any purpose other than that to which you have consented; to know who in the organization is responsible for protecting your personal information; to expect the organization to protect your personal information by appropriate security safeguards; to expect that the personal information held by an organization is accurate, complete, and up to date; to obtain access to your personal information and request corrections if necessary; to complain about how an organization handles your personal information if you feel your privacy rights have been violated; and to have your complaint investigated and receive a response regarding what action the organization will take to address it. If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Privacy Commissioner of Canada.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal and regulatory requirements, operational needs, technology, or industry standards. When we make material changes, we will revise the Last Updated date at the top of this page and post the updated policy on this page. We may also provide additional notice through our website or, where appropriate, via email for changes that materially affect your rights. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website after any changes take effect constitutes your acceptance of the updated policy.

Governing Law

This Privacy Policy shall be governed by, construed, and enforced in accordance with the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to their conflict of law provisions. Any disputes, claims, or controversies arising under or in connection with this policy shall first be addressed through good faith negotiations. If the dispute cannot be resolved through negotiation within thirty days, the dispute shall be submitted to the appropriate courts in Laval, Quebec, Canada, which shall have exclusive jurisdiction. The parties submit to the jurisdiction of such courts for the resolution of any such dispute.

Contact Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data handling practices, please contact us:

We will acknowledge receipt of your privacy inquiry within five business days and will work diligently to resolve any concerns you may have regarding your privacy or data protection.