Privacy Policy

Last updated: 16 October 2026

This policy explains how Lazer Technologies collects, uses, shares and protects personal information, and the choices and rights you have.

The short version

• We collect what you give us when you contact us, work with us or apply for a job, plus basic technical data when you visit our website.
• We use it to reply to you, deliver our services, recruit, run and secure our business, and meet our legal obligations.
• We don't sell personal information.
• When we build software for clients, we handle their data on their instructions and under our contract with them. The client's privacy policy covers that data.
• You can ask to see or correct your personal information, withdraw consent or raise a concern at any time. Our Privacy Officer's contact details are in Section 15.

1. Who we are and what this policy covers

Lazer Technologies is the business name of 2621956 Ontario Inc., an Ontario corporation with its registered office in Toronto, Canada. This policy also covers our US affiliate, Lazer Technologies US, Inc., which recruits and employs members of our US team. In this policy, "Lazer", "we" and "us" mean both companies. We design and build software and AI systems for companies.

This policy covers personal information we handle for our own purposes about:

• visitors to our website, lazertechnologies.com;
• people at our clients, prospective clients, partners and suppliers;
• job applicants and candidates; and
• anyone else who contacts us.

It doesn't cover:

• Data we process for clients. When we deliver services, our team may work in a client's systems and come across personal information the client controls. We handle that information only on the client's instructions and under our agreement with them. The client decides how it's used, and the client's privacy policy applies. If you have a question about that information, contact the client, and we'll help them respond.
• Our own team. Personal information about our employees and contractors is covered by our internal policies.
• Other websites. Our site links to services we don't control, such as LinkedIn and X. Their privacy policies apply when you use them.

2. Personal information we collect

We collect only what we need for the purposes in Section 3.

Apart from background checks, we don't ask for sensitive information, such as health information, unless you choose to share it, for example to request an accommodation during hiring. Please don't include it in messages to us otherwise. If you need an accommodation at any stage of hiring, tell us and we'll work with you. If you give us someone else's personal information, such as a reference's contact details, make sure they're comfortable with you sharing it. You don't have to give us personal information, but if you don't, we may not be able to reply to you, work with you or consider your application.

3. How we use personal information

We use personal information to:

• reply to your questions and requests;
• propose, deliver and manage our services, including contracts, project communication, invoicing and payment;
• recruit, including reviewing applications, interviewing, checking references, running background checks with your consent, making offers and onboarding the people we hire;
• run our business, including accounting, audits, insurance, planning and professional advice;
• operate, secure and improve our website;
• protect our systems, our people and our clients, including detecting and preventing security incidents and fraud; and
• meet our legal, regulatory, tax and contractual obligations, and establish or defend legal claims.

We use personal information only for these purposes or for a related purpose you'd reasonably expect. If we want to use it for a new purpose, we'll tell you and ask for your consent where it's required.

Consent. We collect, use and disclose personal information with your knowledge and consent, except where the law allows otherwise. Consent may be express, such as agreeing to a background check, or implied, such as emailing us a question, which tells us we can use your email address to reply. You can withdraw consent at any time, subject to legal or contractual limits and reasonable notice. If you do, we may not be able to do some things, such as keep considering your job application.

4. How we share personal information

We don't sell personal information, and we don't give it to other companies for their own marketing. We share it only as described below, and only what each recipient needs.

• Service providers. Companies that provide services to us, such as cloud productivity and storage, communications, AI tools and meeting transcription, website hosting, IT and security, human resources and recruiting, background screening, accounting and payments. Our policy requires them to protect the information and use it only to provide services to us.
• Partners involved in our work. For example, a technology partner that referred you to us or supports an engagement you're part of.
• Professional advisers. Our lawyers, accountants, auditors, insurers and insurance brokers.
• Authorities and legal process. Courts, regulators, law enforcement and others when the law requires or permits it, or when it's needed to protect the rights, property or safety of Lazer, our clients or others.
• Business transactions. If we're involved in a merger, acquisition, financing or sale of all or part of our business, the parties involved may receive personal information as part of the transaction, under confidentiality terms and as the law allows.
• With your consent. Anyone else, when you ask us to or agree that we can.

5. Cookies and similar technologies

Our website doesn't currently use analytics, advertising or tracking cookies, and we don't use tracking pixels. Our website host keeps basic server logs, such as IP addresses and the pages requested, to deliver the site and keep it secure.

Our careers page shows our job board, which our recruiting software provider hosts. That provider may set cookies it needs to run the job board when you view or apply for a job.

If we add analytics or other cookies, we'll update this section first and ask for your consent where the law requires it.

You can block or delete cookies in your browser settings.

Some browsers send "Do Not Track" signals. We don't track visitors across other websites, so these signals don't change how our site behaves.

6. AI tools and automated decisions

We use AI tools in our work, for example to help write code and documents, and to record, transcribe and summarize meetings. Our policy requires business or enterprise versions of these tools, with the provider's model training on our data turned off. It also doesn't allow personal information in personal or consumer AI accounts, and people review AI-assisted work before we rely on it.

When we use an AI tool to record or transcribe a meeting, we tell the people in the meeting.

We don't use the personal information this policy covers to train AI models.

We don't make decisions about you that have legal or similarly significant effects, such as hiring decisions, based solely on automated processing. We don't use AI to screen or rank job applicants.

7. Where we store and process information

We're based in Canada. Our team is based mainly in Canada and the United States, and some team members, mostly contractors, work from other countries, including the United Kingdom. They may access personal information from there. Our service providers may store or process personal information in Canada, the United States and other countries. Wherever it's processed, we protect it as this policy describes, and our policy requires our service providers to do the same.

Information held in another country is subject to that country's laws, and courts, law enforcement and other authorities there may be able to access it. If you're in the EEA, the UK or Switzerland, Section 11 explains how we protect transfers. To learn more about our service providers outside Canada, including the countries where they process personal information, contact our Privacy Officer (Section 15).

8. How we protect personal information

We use administrative, technical and physical safeguards suited to how sensitive the information is. They include:

• access limited to people who need it for their work, with multi-factor authentication on company accounts;
• encryption of information in transit and at rest;
• full-disk encryption and endpoint protection on company computers;
• around-the-clock monitoring of company computers and cloud accounts by a managed security provider;
• confidentiality obligations and security awareness training for our team; and
• a vendor policy that requires our service providers to protect the information they handle for us.

No system is completely secure. If a breach of our security safeguards involving your personal information creates a real risk of significant harm to you, we'll notify you and report it to the Office of the Privacy Commissioner of Canada, as the law requires. We'll also notify other regulators where their laws apply.

9. How long we keep personal information

We keep personal information only as long as we need it for the purposes in this policy, or longer where the law requires it, such as for tax and accounting records, or to resolve disputes and enforce our agreements. When we no longer need it, we securely delete it or make it anonymous.

10. Your rights and choices

You can ask us to:

• confirm whether we hold personal information about you and give you access to it;
• tell you how we've used it and who we've shared it with;
• correct it if it's inaccurate or incomplete; and
• stop using it for a purpose you consented to, subject to legal or contractual limits.

You can also manage cookies as described in Section 5.

How to make a request. Email our Privacy Officer or call us toll-free (Section 15). We may ask for information to confirm your identity before we act. We'll respond within 30 days. If we need more time, we'll tell you within those 30 days why, and when you'll hear from us, which will be no more than 30 days later. You can complain to the Office of the Privacy Commissioner of Canada about an extension. Requests are free in most cases. If a fee applies, we'll tell you before we go ahead. If we can't give you some information, for example because it includes someone else's personal information or is legally privileged, we'll explain why unless the law prevents us.

If you're not satisfied. Contact us first and we'll try to resolve it. You can also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you're in Quebec. Our Privacy Officer is the person in charge of the protection of personal information. Your personal information may be communicated outside Quebec, as described in Section 7. You can also ask us for your personal information in a structured, commonly used technological format, and you can complain to the Commission d'accès à l'information du Québec.

If you're in the EEA, the UK, Switzerland or a US state with a privacy law, you may have more rights. See Sections 11 and 12.

11. Additional information for the EEA, the UK and Switzerland

This section applies where the data protection laws of the European Economic Area, the United Kingdom or Switzerland apply to how we handle your personal information.

Controller. 2621956 Ontario Inc. (Lazer Technologies) is the controller of the personal information this policy covers, or Lazer Technologies US, Inc. where it's the company recruiting or working with you. Contact details are in Section 15.

Legal bases. We rely on:

• contract, to take steps you ask for before entering into a contract with us, or to perform one;
• legitimate interests, to run and grow our business, respond to inquiries, recruit, and operate and secure our systems and website, where those interests aren't overridden by your rights; and
• legal obligation, where the law requires us to keep or disclose information.

We carry out criminal record checks only where local law allows them, and on the basis that law provides.

Your rights. You can ask to access, correct or erase your personal information, to restrict or object to how we use it, and to receive it in a portable format. You can object at any time, for reasons relating to your situation, to processing based on our legitimate interests. Where we rely on consent, you can withdraw it at any time, which doesn't affect processing before you withdrew. We'll respond within one month, or tell you if we need longer as the law allows. You can also complain to your local data protection authority, or in the UK, the Information Commissioner's Office.

International transfers. The European Commission, the UK and Switzerland recognize Canada as providing adequate protection for personal information handled by organizations subject to PIPEDA. Where that recognition doesn't cover a transfer, including transfers to the United States, we use appropriate safeguards, such as the European Commission's standard contractual clauses, the UK International Data Transfer Addendum, or a recipient's certification under the EU-U.S. Data Privacy Framework, its UK Extension or the Swiss-U.S. Data Privacy Framework. You can ask us for details of these safeguards.

12. Additional information for US residents

Some US state privacy laws, including California's, give residents rights over their personal information. This section applies where those laws apply to us.

What we collect and why. In the past 12 months we've collected the categories of personal information described in Section 2. Under California law, these are identifiers; professional or employment-related information; education information; commercial information, such as records of services we've provided or discussed; audio or electronic information, such as meeting recordings; internet or other electronic network activity, such as server logs; and, if you share it, for example to request an accommodation, characteristics of protected classifications such as disability. We also collect some sensitive personal information: government identifiers for background checks, citizenship or immigration status where proof of work authorization reveals it, and health information you share to request an accommodation. We collect this information from the sources in Section 2, use it for the purposes in Section 3, disclose it for business purposes to the recipients in Section 4, and keep it as described in Section 9. Any category may go to service providers, professional advisers and, where the law requires it, authorities. Contact details and business relationship records may also go to partners involved in our work.

No sale or sharing. We don't sell personal information or share it for cross-context behavioural advertising, and we haven't in the past 12 months. That includes the personal information of anyone under 16. We use sensitive personal information only for the purposes the law permits, and not to infer characteristics about you, so the right to limit its use doesn't apply. Because we don't sell or share personal information, opt-out preference signals such as Global Privacy Control don't change how we handle it.

Your rights. Depending on your state, you may have the right to:

• know what personal information we collect, use and disclose, and get a copy;
• correct inaccurate personal information;
• delete personal information, subject to legal exceptions;
• opt out of the sale or sharing of personal information, targeted advertising and certain profiling (we don't do any of these); and
• not be treated differently for using these rights.

How to make a request. Email us at privacy@lazertechnologies.com with "Privacy request" in the subject line, or call us toll-free at [toll-free number]. We'll confirm your identity by matching information you give us with information we hold. An authorized agent can make a request for you with your signed permission, and we may ask you to confirm your identity with us directly. If we decline your request, you can appeal by replying to our decision, and we'll respond within the time the law requires. If you're not satisfied with the outcome of your appeal, you can contact your state attorney general.

13. Children

Our website and services are meant for businesses and adults. We don't knowingly collect personal information from children under 16. If you think a child has given us personal information, contact us and we'll delete it.

14. Changes to this policy

We update this policy when our practices or the law change. We'll post the new version on this page and update the date at the top. If a change materially affects how we handle your personal information, we'll give you more prominent notice and ask for your consent where the law requires it.

15. Contact us

Our Privacy Officer is accountable for how we handle personal information and for our compliance with this policy. Send questions, requests and concerns to:

Privacy Officer: Jerry Lin, CFO & Privacy Officer

Email:privacy@lazertechnologies.com

Toll-free phone: +1 647-250-6661

Mail: Lazer Technologies, 98 Berkinshaw Crescent, North York, Ontario M3B 2T2, Canada