Privacy Policy
Effective Date: April 15, 2025
This privacy notice provides an overview of how we manage and protect the personal data we receive or obtain about you. The data we collect about you and how we use it will depend on your relationship with us. MAPPLIGHTS is a company registered in Quebec under Business Number 1178920691 and processes data on behalf of our clients. If you have any questions in relation to this policy, please email us at hello@mapplights.com.
Clients and related parties
If you are an existing client of MAPPLIGHTS, an officer or employee of one of our clients, or a third party related to a client (for example, an occupier, a service provider, or supplier), please email us at hello@mapplights.com to find out more information about how we use your data.
Others
If you do not fall into any of the above categories, the information set out below tells you who we are, what data we may collect, and what we may do with that data. This notice applies if you are a visitor to our website, a contact of ours, or are involved in providing services to us. If you have a Subject Access Request, please contact us.
Introduction
MAPPLIGHTS specializes in light mapping, visual art, light & video projection. This Privacy Policy sets out the basis upon which any personal data we collect from you, or that you provide to us, may be processed by MAPPLIGHTS. Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together, can lead to the identification of a particular person, also constitute personal data. Please read the following carefully to understand our practices regarding your personal data and how we will treat it. By providing your personal data to MAPPLIGHTS, you will be deemed to have consented to the processing of such data by us as set out in this Privacy Policy. You may withdraw your consent for a particular activity at any time, providing it does not impact on any other lawful basis for processing your data, such as contract or vital interest. This can be done by contacting hello@mapplights.com.
Collection and use of your personal data
Your personal data may be collected by MAPPLIGHTS through our website, meetings, emails, and telephone calls to us. Your personal data may be processed by (or on behalf of) MAPPLIGHTS for any of the following purposes:
To communicate with you, such as in the course of developing a commercial relationship.
To send you marketing communications via email or post.
To create and manage records of your involvement with us.
To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
For the security and well-being of our staff and visitors.
Legal basis for data use
The legal basis for our use of data about you is one of the following:
The performance of a contract to which you are a party.
Compliance with a legal obligation to which we are subject.
A legitimate business interest that is not overridden by your interests, rights, and freedoms which require protection.
Where none of the above conditions apply, we will ask for your consent to process the data.
U.S. – California Consumer Privacy Act (CCPA/CPRA) Notice
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:
Request Access: You may request details about the personal data we have collected about you in the past 12 months.
Request Deletion: You may request that we delete personal data we have collected from you, subject to certain exceptions.
Opt-Out of the Sale of Personal Data: You have the right to opt-out of the sale or sharing of your personal data (if applicable).
Non-Discrimination: We will not discriminate against you for exercising your rights under CCPA/CPRA.
To exercise your rights, please contact us at hello@mapplights.com.
EU – General Data Protection Regulation (GDPR) Rights
If you are located in the European Union (EU) or European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
Right to Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccuracies or incomplete data.
Right to Erasure: You have the right to request the deletion of your personal data (right to be forgotten), subject to certain exceptions.
Right to Restriction of Processing: You may request that we restrict the processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing.
Lawful basis for processing
Under the GDPR, we process personal data based on one of the following lawful bases:
Consent: You have provided your consent for us to process your data.
Contractual Necessity: Processing is necessary for the performance of a contract.
Legal Obligation: Processing is required to comply with a legal obligation.
Legitimate Interests: Processing is necessary for our legitimate business interests, and such interests are not overridden by your rights.
Cross-border data transfers
If your personal data is transferred outside of Canada, the EU, or the U.S., we will ensure appropriate safeguards are in place to protect your privacy in line with applicable privacy laws, including Standard Contractual Clauses (SCCs) for EU data transfers and applicable legal protections for Canadian or U.S. transfers.
Who do we share your data with, and for what purposes?
We will only share your data with anyone outside of MAPPLIGHTS where it is justifiable (under the PIPEDA, GDPR, and CCPA/CPRA) to do so.
Changing your preferences
We want to make sure that you are happy with the ways in which we hold and use your personal data. If at any time you wish to check, update, or amend your personal data or preferences, please email us at hello@mapplights.com.
Security measures
We are committed to security and follow appropriate technical and organizational measures in the storage and disclosure of personal data to prevent unauthorized disclosure, use, alteration, or destruction. We will only share your data with anyone outside of MAPPLIGHTS where it is justifiable (under the PIPEDA, GDPR, and CCPA/CPRA) to do so.
How long will data about you be kept?
We store data in accordance with legal, regulatory, financial, and best-practice business requirements. Once our relationship with you ends, we will securely delete/destroy your data in line with our data retention policies.
Time limit to respond
We will aim to respond to all legitimate requests within one month. If your request is particularly complex or you have made a number of requests, it is likely to take us longer than a month to respond. We will notify you of that and keep you updated on progress.
Data Breach Notification (GDPR)
In the event of a personal data breach, we will notify the relevant data protection authority within 72 hours, and if necessary, we will inform affected individuals in accordance with the GDPR requirements.
Links and third-party advertising
Any links on the Website may take you to third-party sites over which we have no control. When linking to another website, you should read the privacy policy stated on that Website. This Privacy Policy does not cover the use of your personal data on any third-party Websites.
Updates to Privacy Policy
This Privacy Policy was last updated on April 15, 2025. We may update this notice (and any supplemental privacy notice) from time to time. We will notify you of any material changes where required by law to do so.
If you have any queries about this Privacy Policy or any queries about the protection of personal data we hold about you, please do not hesitate to contact us at hello@mapplights.com.