Privacy Policy

How we handle your information. Plain language, no legalese.

What we collect on this website

This site does not use cookies or analytics trackers. Below is every way we collect information through this website, what we collect, and what we do with it.

Operations Check-Up (assessment tool)

When you take the check-up, we collect your answers to 15 questions and calculate category scores. This happens in your browser. No data is sent to us unless you choose to request a report.

If you request a report, we collect your first name, email address, and business name (optional). We use this to generate and send your personalized diagnostic report via email. We also log responses for aggregate analysis of common operational patterns across businesses.

Your data is seen only by Jose E Curi Amui (founder). It is not shared with third parties. Personal data is kept indefinitely for aggregate analysis and deleted on request.

Diagnostic report

If you request a full report, we generate a personalized PDF based on your check-up answers and the contact information you provided. Your report is not shared publicly or used in marketing without your permission.

5-day email course

When you opt in during the check-up, we send 5 emails over 5 days with operational tips. After the 5 emails, the sequence stops. You will not receive other emails from this sequence unless you are separately subscribed to another list. Every email includes an unsubscribe link.

Events notification

On the events page, you can leave your email to be notified when seminar and workshop dates are set. We collect your email address only. We use it to notify you about upcoming events and nothing else. Every email includes an unsubscribe link.

"Ask a Question" floating form

The floating contact form on every page collects your name, email, and question. We use this to respond to your question and may follow up once. You are not added to any mailing list unless you opt in separately through another form.

Content downloads

If you provide your email to download a resource (guide, checklist, PDF), we use it to send the requested file. We may send occasional operational insights if you opted in. Every email includes an unsubscribe link.

Assessment calls and engagements

Assessment call

During a free operations assessment call, you share information about your current tools, workflows, and team structure verbally. We document findings in your assessment report.

Engagement

During a paid engagement, we access client data as needed to configure and test workflows. The Data Handling section of our services agreement governs this access. Sensitive client content stays within your own tools. The workflow layer handles triggers and routing, not case content.

How we use information

  • Check-up responses and assessment call findings produce your report and inform recommendations.
  • We do not share client data with external parties.
  • We do not use client data for marketing without your explicit written consent.
  • We may reference anonymized patterns in our content. Business names and identifying details are never included.

Third-party services

These are the tools that touch your data when you interact with Lodestone through this website or during an engagement.

Cal.com

Used for scheduling assessment calls. When you book through our site, Cal.com's own privacy policy applies to the information you provide during booking.

Cloudflare

Hosts this website. Cloudflare's privacy policy applies to standard web hosting and DNS operations.

n8n Cloud

Workflow automation platform. Processes form submissions from this website (check-up results, contact questions, event notifications). Also used during engagements for orchestration: triggers, routing, and notifications. SOC 2 compliant. Sensitive content stays in your own tools.

Brevo

Handles email delivery for diagnostic reports, the 5-day course, event notifications, and any other emails you opt into. Brevo's privacy policy applies. You can unsubscribe at any time.

Google Sheets

Used internally for logging form submissions and tracking aggregate patterns. Data is not shared externally.

OpenAI

Where content generation is part of a workflow, we configure it to run through your own licensed accounts wherever possible. When using Lodestone's API access, OpenAI's business API terms apply, including a no-training guarantee on business data.

Analytics

This site does not currently use analytics. If analytics are added in the future, we will use a cookie-free, privacy-respecting tool (such as Plausible or Umami). No personal data will be tracked. Only aggregate, anonymous usage data will be collected.

Data retention

Data type Retention period
Check-up responses Aggregated anonymously for research. Personal data (name, email) retained until you unsubscribe or request deletion.
Diagnostic reports Kept until you request deletion.
Contact form questions Kept for 12 months, then deleted.
Event notification emails Kept until you unsubscribe or request deletion.
Assessment call reports 12 months, then deleted (unless engagement continues).
Engagement data Duration of engagement + 90 days, then deleted.

You can request deletion of your data at any time by contacting us directly.

Questions about your data

If you have questions about how we handle your information, connect with us on LinkedIn or reach out through our contact page.

Regulatory compliance

Lodestone operates in British Columbia, Canada. We comply with PIPEDA (federal) and PIPA (provincial), the two laws governing how private-sector organizations handle personal information here.

All email communications comply with Canada's Anti-Spam Legislation (CASL). We require express consent before sending commercial emails. Every email includes an unsubscribe link. You can withdraw consent at any time, and we will stop contacting you within 10 business days.

For businesses with professional regulatory obligations, our approach supports your existing compliance requirements. Sensitive client content stays within your own licensed tools. The workflow layer handles scheduling, routing, and notifications only.

Last updated: April 2026