Privacy Policy

1. Introduction

Lux Autohaus (“Lux Autohaus,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who interact with our dealership and website at https://www.luxautohaus.ca.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you browse our vehicle inventory, submit an inquiry, request a trade-in appraisal, upload vehicle photographs, use our financing tools, communicate with our team, subscribe to marketing communications, or use any AI-powered chat or other online feature we make available.

Our privacy practices are intended to comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, Canada’s Anti-Spam Legislation (CASL), and other applicable legal requirements.

This Policy should be read together with any additional privacy notices presented when you use a particular service, including third-party financing services.

2. Information We Collect

The information we collect depends on the services you use and the information you choose to provide.

A. Website browsing

When you browse our website, technical information such as your IP address, browser and device information, access times, pages visited, and technical logs is processed by our website host and by our network and security providers, including Cloudflare, so that we can deliver and protect the website. We do not use this information for advertising.

Our website does not use analytics services, advertising pixels, or marketing cookies. See Section 6.

B. Contact and vehicle inquiries

When you contact us or request information about a vehicle, we may collect your name, email address, telephone number, vehicle of interest, preferred contact method, and the contents of your message.

We use this information to respond to your request, provide requested information, arrange appointments or test drives, and facilitate potential transactions.

C. Trade-in, vehicle appraisal, and sell-your-car requests

When you request an appraisal, trade-in estimate, or vehicle purchase offer, we may collect:

• Vehicle year, make, model, trim, and mileage.
• Vehicle condition, known damage, mechanical issues, and other details you provide.
• Vehicle identification number (VIN), where requested.
• Photographs of your vehicle, where the upload feature is available.
• Your name, email address, telephone number, and relevant messages.
• Information about an outstanding loan, lease, or payout, if you choose to provide it through an appropriate process.

We use this information to assess your inquiry, prepare an indicative appraisal, contact you, and facilitate a potential purchase or trade-in.

An online estimate is not a binding purchase offer or guaranteed appraisal. Any final offer may depend on physical inspection, vehicle history, ownership, condition, and verification of the information provided.

D. Vehicle photographs and uploaded files

Where photo-upload functionality is available, you may submit photographs of your vehicle to help us evaluate its condition and prepare an appraisal.

Uploaded photographs may be stored and processed by Lux Autohaus and the service providers needed to operate the upload feature. Access should be restricted to authorized personnel and providers with a legitimate operational need.

Please upload photographs of the vehicle only. Avoid including people, children’s images, driver’s licences, registration documents, financial records, addresses, or other unnecessary personal or sensitive information.

Photographs may contain embedded metadata, including location information, depending on the device and file format. Our upload tool re-saves each photograph in your browser before it is sent, which is designed to remove this embedded metadata from the copy we receive.

We use uploaded photographs for the appraisal, purchase, or trade-in purpose for which they were provided, together with related operational, security, and legal purposes where applicable.

Uploaded photographs are stored in private cloud storage, not in a public location, and are made available to our team through unique, hard-to-guess secure links included with your request. Photographs are automatically deleted 60 days after upload. If a photograph is needed for a transaction you proceed with, a dispute, or a legal obligation, we may keep a copy in our records for as long as that purpose requires, and then securely delete it.

E. Financing inquiries and financing applications

Our website may allow you to contact our finance team or use financing-related tools.

A general financing inquiry is different from a formal credit application. Our financing inquiry form collects your name, telephone number, and preferred contact method, and, if you choose to provide them, your email address, best time to contact, vehicle of interest, and a message. It does not collect credit application information, does not start a credit check, and does not send your information to any lender. Please do not include sensitive financial or identity information in the message field.

A later formal application may involve additional identifying, employment, income, credit, or financial information.

Where you request financing assistance, personal information may be collected or disclosed to lenders, financial institutions, financing intermediaries, or service providers, as appropriate and authorized.

Before sensitive information is collected or disclosed, we will provide the applicable privacy information and obtain the consent required by law.

You should submit formal credit applications and supporting financial information only through an appropriate process identified by our team or the relevant financing provider.

F. Financing calculator

Our financing calculator provides illustrative estimates based on the values you enter.

The calculator runs entirely within your web browser. The values you enter are not sent to us or to any third party and are not stored. If you open the calculator from a vehicle listing, our server uses that vehicle’s identifier to load the vehicle’s price and status; no personal information is involved. If we change how the calculator works, for example to save or share estimates, we will update this Policy and obtain consent where required.

Calculator results are estimates only. They do not represent a financing approval, credit decision, guaranteed interest rate, or commitment by any lender.

G. AI-powered chat and automated assistants

Lux Autohaus may introduce AI-powered chat, virtual assistants, or other automated communication features.

When such features are available, the information processed may include the text you enter, questions about vehicles, your stated preferences, and information you voluntarily provide during a conversation. Depending on the feature, technical information and conversation records may also be processed.

AI-powered features may use third-party technology providers. Where applicable, those providers may process information on our behalf or under their own privacy terms. Processing locations, retention practices, and permitted uses will depend on the service selected and its configuration.

We intend to design AI-powered features to minimize personal-information processing and to prevent unnecessary transmission of sensitive customer information to AI systems. However, this Policy does not itself establish a technical guarantee that information cannot be transmitted.

Unless a feature specifically provides a suitable secure process, do not enter driver’s licence numbers, government identification numbers, passwords, banking credentials, payment-card details, full financial application details, or other highly sensitive information into a general chat interface.

AI-generated responses may be inaccurate or incomplete. Vehicle availability, pricing, specifications, appraisal values, and financing terms should be confirmed by an authorized Lux Autohaus representative. AI responses do not constitute a binding offer or financing approval.

H. Newsletter and marketing subscriptions

Where newsletter or promotional subscription features are available, we may collect your email address, telephone number where applicable, and communication preferences.

We will obtain the consent required by applicable law before sending commercial electronic messages and will provide a functioning unsubscribe mechanism.

Submitting a vehicle inquiry, requesting an appraisal, or using a calculator does not automatically subscribe you to ongoing promotional communications.

3. Purposes for Using Personal Information

Subject to applicable law and the purposes disclosed at collection, we may use personal information to:

• Respond to vehicle inquiries and customer requests.
• Arrange appointments, test drives, and dealership visits.
• Assess vehicle photographs, condition, and trade-in inquiries.
• Prepare indicative appraisals and facilitate potential vehicle purchases.
• Provide requested vehicle and financing information.
• Administer communications and subscriptions.
• Operate, secure, and maintain our website and online services.
• Troubleshoot technical issues and prevent fraud or unauthorized access.
• Maintain appropriate business records and comply with legal obligations.
• Establish, exercise, or defend legal claims.

We will not use personal information for materially different purposes without appropriate notice and consent where required by law.

4. Consent and Customer Choices

We will obtain meaningful consent for the collection, use, and disclosure of personal information where required by law.

Consent will be appropriate to the nature and sensitivity of the information and the purposes involved. Optional uses that are not necessary to provide a requested service will be presented separately where required.

You may withdraw consent to certain uses or disclosures, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to provide a service if the relevant information is necessary for that service.

Where a new feature materially changes how personal information is used or disclosed, we will provide appropriate notice and obtain additional consent where required.

5. Marketing and Electronic Communications

Commercial emails and text messages are subject to CASL where applicable.

We will obtain valid express or legally available implied consent as required, identify the sender, provide required contact information, and include an unsubscribe mechanism in accordance with applicable law.

We will maintain appropriate records of consent and withdrawal. Unsubscribe requests will be processed within the period required by law.

Communications necessary to respond to an inquiry or administer a requested transaction will be handled according to the requirements applicable to those communications.

6. Cookies, Analytics, and Tracking

Our website does not use analytics services, advertising or social-media pixels, or marketing cookies, and it does not itself set cookies or store information in your browser.

Our website host and our network and security providers, including Cloudflare, may use technical identifiers or similar technologies that are strictly necessary to deliver, secure, and protect the website and its forms, for example to detect automated traffic. These are used for security and performance, not for advertising.

If we decide to introduce analytics, advertising pixels, or similar technologies in the future, we will first update this Policy and provide the notices and choices, and obtain the consent, required by law.

You may be able to manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

7. Disclosure of Personal Information

We may disclose personal information, where reasonably necessary and legally permitted, to:

Service providers: Website hosting, storage, security, communications, customer relationship management, chat, analytics, and other providers that support our operations.

AI technology providers: Providers supporting AI chat or automated features, where those features are enabled and the relevant processing is authorized and appropriately disclosed.

Lenders and financing providers: Financial institutions, lenders, or financing intermediaries where you request financing assistance and the relevant disclosure is authorized and lawful.

Professional advisers: Lawyers, accountants, insurers, auditors, and other professional advisers where reasonably necessary.

Authorities: Courts, regulators, law enforcement, or other recipients where disclosure is required or permitted by law.

Business transactions: Relevant parties involved in a proposed or completed business transaction, subject to applicable legal requirements and appropriate safeguards.

We will limit disclosures to what is reasonably necessary for the applicable purpose and obtain consent where required.

We do not sell or rent personal information collected through this website. We will not disclose personal information to unrelated third parties for their own independent marketing purposes without the consent required by law.

8. Third-Party Websites and Services

Our website may link to third-party websites, marketplaces, social media platforms, lenders, or other services.

When you use an external service, that provider may collect information directly from you and handle it under its own privacy policy and terms.

We do not control the privacy practices of independent third parties. Please review their notices before submitting information through their platforms.

9. Storage and Processing Outside Canada

Our service providers may store or process personal information in Ontario, elsewhere in Canada, or in other jurisdictions, depending on the services used.

Information processed outside Canada may be subject to the laws of that jurisdiction and lawful access by its authorities.

We will assess relevant providers and implement appropriate safeguards in accordance with applicable law. Actual processing locations and provider arrangements will be disclosed where required.

10. Retention and Secure Disposal

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to administer transactions and relationships, resolve disputes, maintain required records, and comply with legal obligations.

Retention periods depend on the type of information and the applicable purpose. Uploaded vehicle photographs are deleted automatically 60 days after upload (see Section 2D). Other inquiries and customer records are kept for as long as we need them to respond to you, manage your request or relationship, and meet our legal and record-keeping obligations.

When information is no longer required, we will take reasonable steps to securely delete, destroy, or anonymize it, subject to applicable legal requirements.

You may ask us to delete the personal information you have given us, subject to legal record-keeping requirements. Where we state an automatic deletion period, such as for uploaded photographs, it is applied through technical controls.

11. Safeguards and Privacy Incidents

We use administrative, technical, and physical safeguards appropriate to the sensitivity of personal information in our custody or control.

These include encrypted (HTTPS) transmission, restricted access and authentication for our staff systems, spam and abuse protections on our forms, and private storage for uploaded files. We also use staff procedures and service-provider arrangements as appropriate.

No electronic system can be guaranteed to be completely secure.

If a privacy incident occurs, we will assess it and take appropriate steps to contain and address it. We will comply with applicable breach reporting, notification, and recordkeeping requirements.

12. Your Privacy Rights

Subject to applicable law and lawful exceptions, you may request access to personal information we hold about you, ask about its use or disclosure, request correction of inaccurate information, raise concerns about our practices, or withdraw consent where permitted.

We may need to verify your identity before responding.

We will respond within applicable legal time limits. Certain information may need to be retained or withheld where permitted or required by law.

If you are dissatisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or another regulator with jurisdiction.

13. Children’s Privacy

Our website and dealership services are intended for individuals legally able to participate in the relevant transaction.

Please do not submit photographs of children or unnecessary personal information about minors through general website features. If you believe a child has provided personal information to us, contact us so we can assess the circumstances and take appropriate action.

14. Changes to This Policy

We may update this Policy to reflect changes to our business, website features, technology providers, or legal obligations.

The current version will be published on our website with an updated effective date. Where a material change requires notice or consent, we will take the steps required by applicable law.

15. Contact Us

For privacy questions, access or correction requests, or complaints concerning our handling of personal information, contact:

Please provide enough information for us to understand your request. Do not send passwords, banking credentials, driver’s licence numbers, or other sensitive identification information through ordinary email.

16. Applicable Law and Regulatory Compliance

Lux Autohaus operates in Ontario, Canada, and is subject to applicable laws and regulations governing motor vehicle dealers, consumer protection, privacy, and electronic communications.

This Privacy Policy is intended to operate consistently with applicable Canadian and Ontario laws, including applicable privacy legislation and the requirements of the Ontario Motor Vehicle Industry Council (OMVIC) and the Motor Vehicle Dealers Act, 2002, and its regulations.

Nothing in this Privacy Policy limits any rights or remedies available under applicable law. This Policy supplements, and does not replace, any other disclosures, contractual terms, or regulatory obligations applicable to our dealership and vehicle sales.