Privacy Policy
How we handle your information. Plain language, no legalese.
Information we collect
Website
No cookies. No analytics trackers. No contact forms. We collect nothing from your visit. Scheduling is handled through Calendly, a third-party service.
Assessment
During a free operations assessment, you share information about your current tools, workflows, and team structure verbally. We document findings in your assessment report.
Engagement
During a paid engagement, we access client data as needed to configure and test workflows. The Data Handling section of our services agreement governs this access. Sensitive client content stays within your firm's own tools. The workflow layer handles triggers and routing, not case content.
How we use information
- Assessment findings produce your report and inform engagement recommendations.
- We do not share client data with external parties.
- We do not use client data for marketing without your explicit written consent.
- We may reference anonymized patterns in our content. Firm names and identifying details are never included.
Third-party services
Calendly
Used for scheduling assessments and calls. When you book through our site, Calendly's own privacy policy applies to the information you provide during booking.
Cloudflare
Hosts this website. Cloudflare's privacy policy applies to standard web hosting and DNS operations.
n8n
Workflow platform used during engagements. SOC 2 compliant. Handles orchestration: triggers, routing, and notifications. Sensitive content stays in your firm's own tools.
OpenAI
Where content generation is part of a workflow, we configure it to run through your firm's own licensed accounts wherever possible. When using Lodestone's API access, OpenAI's business API terms apply, including a no-training guarantee on business data.
Data retention
| Data type | Retention period |
|---|---|
| Assessment reports | 12 months, then deleted (unless engagement continues) |
| Engagement data | Duration of engagement + 90 days, then deleted |
You can request deletion of your data at any time by contacting us directly.
Questions about your data
If you have questions about how we handle your information, connect with us on LinkedIn or reach out through our contact page.
Regulatory compliance
Lodestone operates in British Columbia, Canada. We comply with PIPEDA (federal) and PIPA (provincial), the two laws governing how private-sector organizations handle personal information here.
For firms with professional regulatory obligations (Law Society of BC, CPA BC, CIRO), our approach is designed to support your existing compliance requirements. Sensitive client content stays within your firm's own licensed tools. The workflow layer handles scheduling, routing, and notifications only.
Last updated: March 27, 2026