Last updated: October 29, 2026
Lock ("we", "us") provides mystery shopping services to car dealerships in Canada. We're based in Calgary, Alberta. This policy explains what personal information we collect through lockaudit.ca and through our services, how we use it, and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
What we collect on this website
- Information you send us. When you fill in a form on this site, we collect what you type: usually your name or dealership name, email address and phone number, plus the page you sent it from. When you email us, we receive your email address and whatever you include.
- Technical information. Like most websites, our hosting provider automatically records basic request information such as IP address, browser type, pages requested and the date and time. This is used to run and secure the site.
- Cookies and advertising information. We may use Google Ads to advertise our services. When you arrive from or interact with one of our ads, Google may set cookies or use similar technology to measure ad performance (for example, whether a form was submitted after an ad click) and to show our ads to people who have visited this site. See "Advertising and cookies" below.
How we use it
- To reply to your enquiry, set up mystery shops you request, and provide our services.
- To send service emails such as results, invoices and account notices.
- To measure and improve our website and advertising.
- To keep the site secure and comply with the law.
We don't sell personal information. We don't use your information for purposes you wouldn't reasonably expect without asking you first.
Information collected during mystery shops
When a dealership hires us, we contact that dealership as a buyer by phone, email, text or web form. During a shop we record and keep what the dealership's staff say and send to us, which can include their names, voices (in call recordings), and the content of their emails and texts. We collect this on behalf of the dealership that hired us, use it only to score the shop and prepare the report, and share it only with that dealership. We don't publish it or use it for any other purpose.
The test buyer details we use (names, phone numbers and email addresses) are created for testing. We don't use real members of the public as test buyers.
Who we share it with
We use a small number of service providers to run our business, and share only what they need:
- Vercel hosts this website.
- Google (Gmail) delivers website form submissions to our email inbox by email.
- Google serves the fonts on this site and, if we advertise with Google Ads, provides ad measurement.
- Our email, phone and file storage providers store messages, recordings and reports.
Some of these providers store or process information outside Canada, including in the United States, where it may be subject to local laws. We may also disclose information if the law requires it.
Advertising and cookies
If we run Google Ads, Google may use cookies to measure conversions and to show our ads to people who have visited this site. You can control personalized advertising at adssettings.google.com, learn how Google uses information at policies.google.com/technologies/partner-sites, and block or delete cookies in your browser settings.
How long we keep it
We keep enquiries and client records for as long as we're working together and as long afterwards as we reasonably need for accounting, legal and tax purposes. We keep mystery shop recordings and reports for as long as the client needs them for coaching and comparison, and delete them when they are no longer needed or when the client asks.
How we protect it
We use reasonable safeguards for the sensitivity of the information, including access controls on our accounts and storage, and we limit access to people who need it to do their work.
Your choices and rights
You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent to us using it (which may mean we can't provide a service). Send us a message and we'll respond within 30 days. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
Changes to this policy
We may update this policy. The date at the top shows when it last changed.
Contact
Lock, Calgary, Alberta · Send us a message