Your Law 25 rights
Quebec’s Law 25 (amending the Act respecting the protection of personal information in the private sector) reinforces your rights over personal data that companies hold about you. This page lists the six rights Lumos recognizes and explains how to exercise them.
The six rights
1. Right of access
You can ask Lumos for confirmation that information about you is held and receive a copy.
Concretely, you obtain:
- All your identification data (name, email, etc.).
- The history of your activity (projects, inspections, reports).
- Communications Lumos has sent you.
- The consent settings you have granted.
2. Right of rectification
You can request correction of inaccurate or incomplete information.
Most routine rectifications happen directly in My Profile or your account settings. For more complex cases (e.g. correcting historical data in an already-delivered report), go through privacy@lumos.property.
3. Right to erasure
You can request deletion of your information, subject to:
- Our legal retention obligations (e.g. billing data is kept for 7 years for tax reasons).
- Your own professional retention obligations (liability insurance, BNQ standards).
To close your account and obtain deletion of your data:
- Request deletion via
privacy@lumos.property. - Lumos confirms the request and proceeds with deletion or anonymization within 90 days.
- Lumos informs you of completion.
4. Right to portability
You can receive your data in a structured technological format that is commonly used:
- CSV or JSON for structured data (project, inspection, account information).
- ZIP archive for media files (photos, audios, PDFs).
You can also request that Lumos directly transmit this data to another organization authorized to receive it.
Export is also accessible directly from the Projects page via the Export button (see Chapter 12.6).
5. Right to withdraw consent
You can withdraw at any time your consent to processing. Withdrawal does not affect the legality of past processing but stops any future processing.
Concrete cases:
- Audio capture — disable the toggle in Settings > Privacy (see Audio capture consent).
- Commercial communications — use the unsubscribe link in any commercial Lumos email, or write to
privacy@lumos.property. - AI training — Lumos does not use your data to train its models; if this changes someday, your explicit consent will be requested and you can refuse without losing access to the Software.
6. Right to opt out of commercial communications
You can unsubscribe at any time from any commercial Lumos communication via the link in each email or in writing to privacy@lumos.property.
Service communications (account information, important updates, security alerts) are not affected by this opt-out — they are necessary for proper account functioning.
How to exercise a right
The single channel
For any request to exercise one of these rights, write to:
privacy@lumos.property
The Privacy Officer at Lumos is Sébastien Malherbe, reachable at this address.
In your request, specify:
- Your identity (name, email associated with your Lumos account).
- The right you wish to exercise.
- The specific data or operations concerned (if applicable).
Response time
Lumos commits to handling your request within a maximum of 30 days, in accordance with Law 25.
Recourse if rights are not respected
If you believe your rights have not been respected after contacting Lumos, you can file a complaint with the Commission d’accès à l’information du Québec (CAI):
- Website: www.cai.gouv.qc.ca
- The CAI is the independent body that oversees Law 25 enforcement.
Data retention
For your information, the retention durations Lumos applies:
| Data type | Duration |
|---|---|
| Active account | Retained as long as your account is active |
| Closed account | Deletion or anonymization within 90 days |
| Inspection data (reports, photos, transcriptions) | As long as your account is active; notice before deletion in case of non-renewal |
| Raw audio recordings | Maximum 7 days or deleted at finding confirmation |
| OpenAI (transcription) | Up to 30 days on the vendor side |
| Billing data | 7 years (tax and accounting laws) |
| System backups | Per Lumos policy, subject to legal obligations |
Client rights
If you are a client who received a report via Lumos:
- For data your inspector collected about you (contact details, etc.), exercise your rights directly with your inspector — they are the initial controller.
- For commercial communications Lumos sends you, exercise your rights with Lumos via
privacy@lumos.property.