Privacy Policy

LaMia Sweet, a technology practice operated by La Mia Confection Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://www.lamiasweet.autos or engage with our computer systems design and integration services. Please read this policy carefully. If you do not agree with the terms of this policy, please discontinue use of our site and services.

1. Information We Collect

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you fill out our contact form, send us an email, call our office, or otherwise communicate with us. This information may include:

• Identity Data: Your full name, job title, and company name.
• Contact Data: Email address, phone number, mailing address, and country of residence.
• Project Data: Information about your project requirements, system specifications, technical needs, timeline, and budget that you share with us when inquiring about our services.
• Communication Data: The content of messages you send to us, including emails, form submissions, and any attachments or supporting documents you provide.

1.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard web technologies. This includes:

• Usage Data: Pages visited, time spent on each page, referring URLs, and navigation patterns within our site.
• Device Data: Browser type and version, operating system, screen resolution, device type (desktop, tablet, or mobile), and language preferences.
• Network Data: IP address, internet service provider, approximate geographic location derived from your IP address, and connection speed.
• Cookies and Similar Technologies: We use cookies to maintain session state, remember user preferences, and analyze site traffic. You can control cookie settings through your browser preferences.

2. How We Use Your Information

La Mia Confection Inc. uses the collected information for the following purposes:

• Service Delivery: To respond to your inquiries, provide quotes, deliver our computer systems design and integration services, and manage client relationships.
• Communication: To contact you regarding your projects, send service-related updates, technical assessments, proposals, and support communications.
• Website Improvement: To analyze how visitors interact with our website, identify areas for improvement, and enhance the user experience.
• Security and Fraud Prevention: To monitor for suspicious activity, protect against unauthorized access, and maintain the security and integrity of our systems and infrastructure.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
• Business Operations: For internal record-keeping, billing, accounting, and operational management of La Mia Confection Inc.

3. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate business interests in providing and improving our services, maintaining client relationships, and securing our systems, provided these interests are not overridden by your rights and freedoms.
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to marketing communications.
• Legal Obligation: Processing is necessary for compliance with a legal or regulatory obligation to which La Mia Confection Inc. is subject.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

• Service Providers: We may engage trusted third-party companies and individuals to facilitate our services, provide the service on our behalf, perform service-related functions, or assist us in analyzing how our services are used. These providers include cloud hosting services, email delivery platforms, analytics tools, and IT infrastructure vendors. All service providers are contractually bound to protect your data and use it only for the purposes we specify.
• Professional Advisors: We may share information with our legal, accounting, and insurance advisors as necessary for obtaining professional advice, managing risks, and handling legal claims.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court order, subpoena, or government agency demand.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. You will be notified via email or a prominent notice on our website of any change in ownership or uses of your personal information.
• With Your Consent: We may share your information for any other purpose with your explicit consent or at your direction.

5. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the nature of the data and the purpose of processing:

• Client Project Records: Retained for the duration of the client relationship plus seven years after the completion of the last project, in accordance with Canadian tax and commercial record-keeping obligations.
• Inquiry and Correspondence Data: Retained for up to three years from the date of last communication unless a client relationship is established.
• Website Usage Data: Retained in anonymized or aggregated form for up to twenty-six months for analytics purposes.
• Financial and Transaction Records: Retained for a minimum of seven years to comply with tax law and financial reporting obligations under Canadian regulations.

When personal information is no longer needed, we will securely delete, destroy, or anonymize it using industry-standard methods to prevent unauthorized access or reconstruction.

6. Data Security

La Mia Confection Inc. implements and maintains technical, administrative, and physical security measures designed to protect the confidentiality, integrity, and availability of your personal information. Our security practices include:

• Encryption: Data transmitted between your browser and our website is protected using Transport Layer Security (TLS) encryption. Sensitive data at rest is encrypted using AES-256 standards.
• Access Controls: Access to personal information is restricted to authorized personnel who have a legitimate business need. We enforce role-based access controls, multi-factor authentication, and regular access reviews.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), and continuous security monitoring.
• Security Assessments: We conduct regular vulnerability assessments, penetration testing, and security audits of our systems and applications.
• Incident Response: We maintain a documented incident response plan. In the event of a data breach involving your personal information, we will notify affected individuals and relevant authorities as required by applicable law without undue delay.
• Staff Training: All employees and contractors undergo data protection and security awareness training and are bound by confidentiality obligations.

While we strive to protect your personal information using commercially reasonable means, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. International Data Transfers

La Mia Confection Inc. is headquartered in Innisfil, Ontario, Canada. If you are accessing our website or services from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada where our servers and central database are located. By using our services, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this policy.

When we transfer personal information across borders, we implement appropriate safeguards to ensure that the data remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses, adequacy decisions, or binding corporate rules.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal information we hold about you and to verify that we are processing it lawfully.
• Right to Rectification: You may request that we correct any incomplete or inaccurate information we hold about you.
• Right to Erasure: You may request that we delete or remove your personal information where there is no compelling reason for us to continue processing it.
• Right to Restrict Processing: You may request that we suspend the processing of your personal information in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing of your personal information where we are relying on a legitimate interest, including profiling and direct marketing.
• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the details provided in Section 12 below. We will respond to your request within thirty days. We may need to verify your identity before processing your request. In some cases, we may charge a reasonable fee if your request is manifestly unfounded or excessive.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where visitors come from. Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and provide information to site owners.

We use the following categories of cookies:

• Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. The site cannot function properly without these cookies.
• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our content, navigation, and overall user experience.
• Functional Cookies: These cookies allow our website to remember choices you make, such as language preferences or the region you are in, and provide enhanced, more personalized features.

Most web browsers allow you to manage your cookie preferences through the browser settings. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

10. Childrens Privacy

Our services and website are not directed to and are not intended for use by individuals under the age of sixteen. We do not knowingly collect, use, or disclose personal information from children under sixteen without verifiable parental consent. If we become aware that a child under sixteen has provided us with personal information without parental consent, we will take immediate steps to delete such information from our records. If you believe a child under sixteen has provided us with personal data, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes, we will update the Last updated date at the top of this page and post a notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any modifications to this policy constitutes your acknowledgment of the changes and your consent to abide by the updated terms.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us using the details below. We take all privacy-related inquiries seriously and will address them promptly.

You also have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal information violates applicable data protection law. In Canada, the federal Office of the Privacy Commissioner (OPC) oversees compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).