Privacy Policy

Lollie Accounting Inc. ("Lollie", "we", "our") is a Canadian accounting firm providing bookkeeping, financial reporting, and business advisory services to small businesses and entrepreneurs across Canada.

We are the "organization" responsible for your personal information under PIPEDA. If you have questions about this policy, contact us at hello@itslollie.com.

We collect personal information in the following categories:

• Account information: Your full name, email address, phone number, and business name when you create a client account.
• Business information: Province of operation, financial documents you upload, bookkeeping records, and communication history with your CPA.
• Technical information: IP address, browser type, pages visited, time spent on pages, and referral source — collected anonymously via Google Analytics (only if you consent to cookies).
• Communications: Any messages you send us via email or our contact forms.

We do not collect sensitive financial credentials (banking passwords, CRA login) and will never ask for them.

Under PIPEDA, we must have a clear reason for collecting your information. We collect and use your data to:

• Provide bookkeeping, reporting, and accounting services to you
• Create and manage your client account and portal
• Communicate with you about your account, invoices, and deadlines
• Send transactional emails (welcome, password reset, document notifications)
• Understand how visitors use our website so we can improve it (analytics, with consent only)
• Comply with Canadian tax and accounting regulations
• Prevent fraud and ensure the security of our systems

We will not use your information for any other purpose without your consent.

By creating an account or submitting a form on our website, you consent to the collection and use of your information as described in this policy.

For cookies and analytics, we ask for your explicit consent via the cookie banner displayed on your first visit. You may decline analytics cookies without affecting your ability to use our services.

You may withdraw consent at any time by contacting us at hello@itslollie.com. Withdrawing consent may limit our ability to provide certain services.

We do not sell or rent your personal information. We share it only with trusted service providers necessary to operate our business:

All third-party processors are bound by data processing agreements and are required to protect your information in accordance with applicable privacy laws.

We keep your personal information only as long as necessary:

• Active client accounts: as long as you remain a client
• Inactive accounts (no activity for 3 years): deleted upon request or after 7 years
• Financial records: minimum 7 years as required by the Canada Revenue Agency
• Analytics data: anonymized — no identifiable information retained beyond 26 months
• Email communications: 2 years from last contact

As a Canadian resident, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Withdrawal of consent: Withdraw your consent to our use of your information at any time (subject to legal obligations).
• Deletion: Request that we delete your personal information, subject to our legal retention obligations.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca if you believe we've violated PIPEDA.

To exercise any of these rights, email us at hello@itslollie.com. We will respond within 30 days.

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or disclosure. These include:

• Encrypted data storage and transmission (HTTPS/TLS)
• Row-level security on our database — you can only access your own data
• Private document storage buckets — files are not publicly accessible
• Password hashing — we never store plain-text passwords
• Access controls — only authorized Lollie staff can access client data

No system is 100% secure. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and the OPC as required by PIPEDA.

Our website uses cookies to provide core functionality and, with your consent, to collect anonymous analytics data.

You can change your cookie preference at any time by clearing your browser's local storage for itslollie.com, or by contacting us.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at hello@itslollie.com.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify active clients by email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding your personal information, please contact our Privacy Officer:

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.