Privacy Policy

LOOSHI LABO Inc. (“LOOSHI LABO”, “we”, “us”) is a software and systems consultancy incorporated in Alberta, Canada. This policy explains what personal information we collect through looshilabo.com and the inquiries you send us, how we use and protect it, and the choices you have. We handle personal information in accordance with Alberta’s Personal Information Protection Act (PIPA) and, where it applies, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy covers the website and inquiries. Information we handle while delivering work for a client is governed by that client’s written agreement with us.

What we collect

Information you send us. When you use the contact form or email us, we receive what you choose to include — typically your name, work email address, company or organization, a description of the workflow or system you want to improve.

Technical information. Like most websites, the servers that deliver this site may automatically record standard request information such as IP address, browser type, the page requested and the date and time. This is used to operate and secure the site.

What we don’t do. This site does not use visitor analytics, advertising pixels, session recording, or advertising tracking cookies. Fonts and images are served from our own site. Our host may set strictly necessary security cookies to protect the site from abuse; these are not used for advertising.

The contact form sends your answers through Cloudflare to Resend for delivery to our Google Workspace mailbox. Cloudflare Turnstile checks for spam and automated abuse and may process technical browser and device information for that purpose. A submission confirmation means our delivery service accepted the inquiry; it does not mean that someone has read it yet. We do not automatically add form submissions to a relationship database.

Please don’t send sensitive information

You don’t need to share sensitive details to start a conversation. Please don’t include patient or health information, passwords or other credentials, payment details, or confidential datasets in an inquiry. If something sensitive is needed later, we’ll agree on an appropriate way to handle it first.

How we use it

• to read and reply to your inquiry;
• to understand your situation and decide whether we can help;
• to arrange a conversation and, if you choose to work with us, to prepare a proposal or agreement;
• to keep a reasonable record of business correspondence; and
• to operate, secure and troubleshoot the website.

We don’t sell or rent personal information, and we don’t add you to a mailing list because you contacted us. We only use personal information for other purposes with your consent or where the law permits or requires it.

Consent

By sending us an inquiry, you consent to us using the information you provide for the purposes above. You can withdraw your consent at any time by emailing hello@looshilabo.com; we’ll stop using your information and delete it unless we need to keep it for a legal or business reason described in this policy.

Service providers, including outside Canada

We use a small number of service providers to operate. They process information to deliver their services and protect those services from abuse, subject to their applicable terms and privacy commitments.

• Email and documents — Google Workspace (Google LLC). Inquiries and related correspondence are received, stored and managed in Google Workspace. This information may be stored or processed in the United States and other countries where Google operates, for the purpose of providing email, document storage and related security services to us.
• Website hosting and security — Cloudflare (Cloudflare, Inc.). The site is hosted on and delivered through Cloudflare’s global network. The technical request information described above may be processed in the United States and other countries where Cloudflare operates, for the purpose of delivering the website and protecting it from attacks and abuse. Cloudflare also processes submitted form answers to validate and route them to our delivery service. Turnstile processes technical information for spam and abuse protection, and Cloudflare also uses those technical signals to improve its bot detection. See Cloudflare’s Turnstile Privacy Addendum.
• Contact-form email delivery — Resend (Plus Five Five, Inc.). Resend receives the inquiry content, sender address and delivery metadata to send the inquiry to our business mailbox and troubleshoot delivery. This information may be processed in the United States and through its service providers outside Canada. We use it for inquiry delivery, with email-open and click tracking disabled. Resend may screen a small sample of email content for trust and safety on dedicated infrastructure operated by Resend; it states that this content is not used to train or fine-tune models.

Information stored or processed outside Canada is subject to the laws of those countries and may be accessible to courts, law enforcement and national security authorities there. For questions about our service providers outside Canada, contact the person listed under “Contact us”.

How long we keep it

Our website does not maintain a separate inquiry database. The delivery service retains email content and delivery records under its configured retention period, currently 30 days. Business correspondence received in Google Workspace is managed as described below.

We keep personal information only as long as it is reasonably needed for the purposes above or for legal and business requirements. We review inquiries that don’t lead to an engagement and remove personal details we no longer need, generally within 12 months of our last meaningful contact. If you ask us not to contact you again, we may keep a minimal record so that we can respect that request. If you become a client, records are kept as set out in your agreement and as required by law, such as tax and accounting rules.

How we protect it

We use reasonable safeguards for the sensitivity of the information, including access limited to the people who need it, multi-factor authentication on business accounts, a business password manager, and encrypted connections (HTTPS) to this website. No method of transmission or storage is completely secure, but we work to protect the information you share and review our practices as the business grows.

If a privacy breach creates a real risk of significant harm to anyone, we will notify the affected individuals and the Office of the Information and Privacy Commissioner of Alberta as PIPA requires.

Your rights: access and correction

You can ask what personal information we hold about you, how it has been used and to whom it has been disclosed, and ask us to correct it. Send your request to hello@looshilabo.com. We may need to confirm your identity, and we will respond within the time required by law (generally within 45 days under PIPA). Access is free in most cases; if a fee ever applies, we’ll tell you first.

Contact us

Questions, requests or concerns about this policy or our service providers can be sent to:

If you’re not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta or, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.

Changes to this policy

We may update this policy as our services, providers or legal requirements change. The date at the top shows when it was last updated. Significant changes will be reflected here before they take effect.