Privacy policy

Last updated 5 November 2026.

Who we are

This website and the author services it describes are run by Lochlytic Inc. (trading as Lochlytic Publishing), Oakville, Ontario, Canada. In this policy “we” means us. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and for authors and readers in the UK and Europe we also meet the UK GDPR and the EU GDPR.

Visitors to this website

If you send a message through the contact form, we receive your name, email address, your message, and anything you tell us about your book and the help you’d like. We use them only to reply and to prepare a quote, and we keep them as long as needed to answer you and for any work that follows. The form is protected by Cloudflare Turnstile, which checks that a person is sending it.

Visitor numbers are counted with Cloudflare Web Analytics, which doesn’t use cookies or follow you across other websites. This site sets no cookies of its own. If we offer a booking link and you use it, the booking service’s own privacy policy applies to the booking.

Authors we work with

To do the work you’ve asked for, we hold your contact details, your manuscripts and files, the details of your books, the posts and images you add to a website we run for you, and records of our quotes, invoices and, where you have a shop, your sales and printing. We use them only to provide the service, to invoice you, and to keep the accounting records the law requires. We don’t share your manuscript with anyone who isn’t working on it for you, and we never feed it to AI tools.

Your readers

When readers buy from your website, contact you or join your newsletter, you are responsible for their information and we handle it on your behalf, only to run your website, shop and printing. That includes names, email addresses, delivery addresses and order details. We never use your readers’ information for our own marketing and never sell it.

Who else sees information

• Cloudflare, which hosts the websites, counts visitors and protects the sites from attacks.
• Resend, which sends emails from the websites, such as contact-form messages and sign-in links.
• Stripe, which takes payments on an author’s own Stripe account, where a website has a shop.
• Lulu, which prints and posts books, where a website has a shop: the reader’s name, delivery address and phone number.
• EmailOctopus, or another newsletter provider chosen with the author, for readers who join a newsletter.
• Printers, editors, artists and other specialists we bring in for a specific piece of work, who see only what that work needs.

Some of these companies store information outside Canada, including in the United States and the United Kingdom, where it may be accessible to the authorities there. We choose providers that protect it to a standard comparable to Canadian law.

Emails from us

We only send marketing emails with your consent, as Canada’s Anti-Spam Legislation (CASL) requires. Every such email says who it’s from and has a working unsubscribe link. Emails about the service you use (quotes, invoices, orders, account notices) aren’t marketing.

How long we keep it

Business and accounting records are kept for six years, as Canadian tax law requires. When an author leaves, we export their information for them and then delete what we no longer need to keep. Contact-form messages that don’t lead to work are deleted within a year.

Your rights

You can ask to see the information we hold about you, to correct it, to have it deleted where we no longer need it, or to withdraw your consent where we rely on it. Contact us at contact@lochlyticpublishing.com. If you’re unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in the UK, the Information Commissioner’s Office (ico.org.uk).