1. Scope
This policy applies to the Ask Lilac website, contact forms, and services that reference this policy. A client agreement, data processing agreement, or product-specific notice may provide additional terms for a particular engagement.
2. Information we receive
Website inquiries
When you contact us, we receive the information you choose to provide, such as your name, work email, organization, area of interest, and message. Our website form is processed through Formspree.
Website and device information
Our website uses analytics and advertising technologies, including Google Analytics, Microsoft Clarity, the Meta Pixel, and the X Pixel. Depending on your browser, location, and settings, these providers may receive information such as your IP address, device and browser details, referring pages, page interactions, and cookie or similar identifiers.
Service and integration data
When an organization engages Ask Lilac, our services may process information from systems the organization chooses to connect. This can include documents, knowledge sources, account identifiers, prompts, outputs, and operational records required for the agreed service.
3. How we use information
We use information to:
- Respond to inquiries and evaluate potential engagements.
- Deliver, secure, support, and improve contracted services.
- Understand website performance and the effectiveness of our communications.
- Detect misuse, protect our systems, and meet legal obligations.
We do not use data obtained from client integrations, including Google Workspace APIs, to train or improve generalized AI or machine learning models. Integration data is used only to provide and improve the specific service requested by the client.
4. When information is shared
We may share information with service providers that help us operate our website and deliver services, including hosting, form processing, analytics, security, cloud infrastructure, and contracted technology providers. We may also disclose information when required by law, to protect rights and safety, or at the direction of the organization responsible for the data.
Client-specific subprocessors and data flows may be documented in the applicable service agreement or data processing agreement.
5. Retention and deletion
We retain inquiry information for as long as reasonably needed to respond, maintain business records, and meet legal obligations. Service data is retained according to the applicable agreement, the organization's instructions, and legal requirements. When data is no longer required, we delete or de-identify it using reasonable processes.
6. Security
We use administrative, technical, and organizational safeguards appropriate to the nature of the information and the service. These can include encryption, access controls, authentication, logging, staff practices, and vendor review. No system can guarantee absolute security.
7. Your choices
You can use browser and device controls to limit cookies and similar technologies. Blocking some technologies may affect website functionality. You may also contact us to ask about access, correction, or deletion of information associated with you. We will respond according to applicable law and any obligations we have to the organization responsible for the data.
8. International processing
Ask Lilac is based in Canada. Our service providers and client systems may process information in other countries. Where required, contractual and technical measures are used to support appropriate protection.
9. Third-party services and links
Our website and services may link to or integrate with third-party services. Their privacy practices are governed by their own policies, except where they process information on our behalf under an agreement.
10. Changes and contact
We may update this policy as our services or legal obligations change. The date at the top of the page identifies the latest revision. Questions and privacy requests can be submitted through our contact form.