Enterprise Privacy & Confidentiality Policy
Governing commercial procurement, CAD file security, quotation intake, and ISO 9001:2015 traceability.
1.1 Commitment to Industrial Privacy
Lumicision Inc. operates as an ISO 9001:2015 certified precision laser cutting, micro-welding, CNC machining, and sheet metal fabrication facility headquartered in Richmond Hill, Ontario, Canada. In providing precision contract manufacturing services to automotive OEMs, medical device developers, aerospace defense contractors, research institutions, and architectural engineering firms, we treat client designs, proprietary intellectual property, 3D CAD geometry, and personal identifiers with strict commercial confidentiality.
Our data management practices comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy statutes, and international enterprise data security standards.
1.2 Information We Collect
To evaluate manufacturing feasibility, generate rapid itemized quotes, execute production runs, and ship finished hardware, Lumicision collects the following categories of information:
Full legal name, corporate business entity name, division, job title, authorized procurement agent credentials, and departmental affiliations.
Direct corporate email address, direct phone and mobile numbers for operational notifications, corporate headquarters address, and receiving loading dock delivery addresses.
2D and 3D CAD files (.STEP, .STP, .DXF, .DWG, .IGES, .SLDPRT, vector PDF, AI), Bills of Materials (BOM), tolerance prints, alloy specifications, and quality inspection criteria submitted via quote forms, email, or client portals.
Billing addresses, commercial Purchase Order (PO) numbers, payment transaction confirmations, trade credit applications, and tax exemption certificates.
Browser agent type, operating system, IP address, and anonymized user interaction telemetry collected via privacy-first analytics to maintain platform performance, verify form submissions, and defend against malicious cyber activity.
1.3 How Information Is Used
We process commercial and engineering data strictly for legitimate manufacturing and contractual purposes:
- • Design for Manufacturability (DFM) & Quoting: Analyzing part geometry, sheet nesting density, laser cut speeds, and tonnage requirements to provide formal itemized engineering quotations within 2 to 24 hours.
- • Production Execution: Programming CNC cutting paths, wobble laser micro-welding trajectories, press brake CNC backgauges, and 3D engraving parameters in our Richmond Hill facility.
- • Quality Audits & Compliance: Generating Mill Test Reports (MTRs), AS9102 First Article Inspection reports, certificate of conformance packages, and GS1 UDI serialization logs for medical/aerospace traceability.
- • Transactional Notifications: Dispatching dock will-call notifications, freight tracking numbers, order confirmations, packing slips, and responsive engineering clarifications.
- • Account Administration: Authenticating client portal sessions (my.lumicision.com), processing invoice payments (via Interac e-Transfer, corporate wire, or Square), and enforcing commercial security controls.
1.4 Third-Party Fulfillment & Subcontractor Disclosure
Zero Data MonetizationIn order to fulfill custom manufacturing contracts, we disclose limited, necessary operational information exclusively to vetted subcontractors and service providers bound by strict confidentiality:
We provide recipient contact names, facility addresses, and phone numbers to freight carriers (e.g., FedEx, UPS, freight forwarders, dedicated couriers, and customs brokers) strictly for the physical delivery of parts and customs clearance.
For secondary operations not completed within our primary production cells (e.g., MIL-SPEC Type II/III anodizing, powder coating, zinc/gold electroplating, passivating, or vacuum stress-relief heat treatment), we share only the technical specifications (dimensions, masking prints, alloy certs) necessary to execute the process. Full proprietary CAD assemblies are never disclosed to secondary vendors unless explicitly required and authorized.
Encrypted digital payment processing is handled through PCI-DSS compliant payment gateways (Square and verified banking networks). Digital file hosting and client portal services operate on SOC 2 compliant enterprise cloud infrastructure utilizing AES-256 at-rest and TLS 1.3 in-transit encryption.
1.5 Intellectual Property & Non-Disclosure Agreements (NDAs)
We recognize that engineering drawings, patent-pending prototypes, and production tooling files represent valuable commercial trade secrets.
Lumicision routinely executes mutual, bilateral Non-Disclosure Agreements (NDAs) with corporate purchasing agents and engineering leads prior to receiving proprietary engineering drawings.
CAD geometry is isolated to certified fabrication engineers and CAM programmers. Uninvolved staff and outside visitors do not have access to client part files.
Client CAD models and proprietary geometry are never uploaded to public generative AI tools or used to train third-party foundation models.
1.6 Data Retention & Security Protocols
Under our ISO 9001:2015 quality management system, manufacturing job travellers, material test certifications, and quality inspection records are maintained for traceability periods required by aerospace, automotive, and medical standards.
Data Deletion Requests: Clients may request complete destruction of digital CAD models, removal of contact records, or an audit of stored files upon conclusion of a project by emailing privacy@lumicision.com or info@lumicision.com. Requests are fulfilled within 10 business days, subject to mandatory statutory tax and accounting retention requirements.