Privacy Policy
Last updated: July 24, 2026
This Privacy Policy explains how Lulu Island Flagship Cleaning Services collects, uses, retains, and protects personal information, in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable British Columbia privacy law.
1. Information we collect
Contact details (name, phone number, email); service address; photos taken during service checklists for quality control, and, where a warranty claim is opened, additional evidence photos related to that claim; payment method information — we do not store full card numbers ourselves; card payments and holds are processed and tokenized by Stripe, PayPal advances are processed by PayPal, and Alipay/WeChat Pay payments are processed through Stripe; your reservation and service history; and communications you have with our team.
2. How we use your information
To schedule and staff your service, verify your identity by phone (one-time code), authorize and process payment holds, captures, and refunds according to our Cancellation Policy, run quality control and resolve warranty claims, comply with legal and tax obligations, and, if you opt in, run our referral and Lulu Wallet programs.
3. Retention
Quality-control checklist photos are kept for 1 year from the service date. Photos tied to an open or resolved warranty claim/dispute are kept for 2 years and are never deleted while a related dispute remains open. If you request deletion of your personal information, your record is de-identified immediately and retained in a restricted, purge-eligible state for 2 years to meet our tax and legal record-keeping obligations, after which it is permanently purged.
4. Your rights under PIPEDA
You have the right to access the personal information we hold about you, request correction of inaccurate information, and request deletion of your personal information (subject to the retention obligations described above). To exercise any of these rights, contact us at hello@luluislandflagship.ca. Access and deletion requests are logged and are due a response within 48 hours of receipt under our internal service-level commitment.
5. Breach notification
If a data breach creates a real risk of significant harm, we will notify the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) and affected individuals within 72 hours of detecting the breach.
6. Service providers and third parties
We share the minimum necessary personal information with service providers who help us operate: Stripe (card payments, authorization holds, and refunds), PayPal (first-time reservation advances), Supabase (database and account hosting), and Sentry (technical error monitoring). Each provider is contractually and technically restricted to using your information to provide their service to us.
7. Cookies and session data
We use functional cookies and local session storage strictly necessary to keep you signed in and to operate the checkout flow. We do not use third-party advertising trackers.
8. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated date.
9. Contact
Privacy questions or requests can be sent to hello@luluislandflagship.ca.