Privacy Policy

Last updated: October 15, 2026

1. Who we are

Lepore & Company CPA (“Lepore & Company”, “we”, “us”) is a chartered professional accounting firm located at 145 Highway 8, Stoney Creek, Ontario L8G 1C1. This policy explains how we collect, use, share and protect personal information on lepore-ca.com, when you contact us, and when you engage our services. We handle personal information in line with applicable Canadian privacy law, including Québec’s private-sector privacy law where it applies.

2. Person responsible for privacy

Affan Khalid, CPA, CA, is responsible for the protection of personal information at Lepore & Company. Privacy questions and requests can be sent to support@lepore-ca.com, by phone at (905) 561-1278, or by mail at the address above.

3. Information we collect

When you contact us or complete a form, we collect what you provide. This may include your name, email address, telephone number, company name, your answers about your situation (for example, where in Canada the work takes place), any message you add, and your confirmation of the form’s acknowledgement. Please do not send Social Insurance Numbers, U.S. EINs, account numbers or tax documents through our website forms. We will arrange a secure method if we need them.

With each form entry, our form software also records:

• your IP address and browser details (user agent);
• the pages you viewed on our site before submitting, with the time of each visit (see section 5); and
• general form-usage statistics, such as how many times a field was selected, how long it took to complete and whether an error message was shown. These statistics do not include what you type.

When you pay an invoice online, we receive your name, email address, company name, invoice number and payment amount. Your card details go to our payment processor (see section 7).

When you become a client, we collect the information needed to provide our services and bill for them, including financial and tax information and transaction records.

When you browse our site, our website host keeps standard technical logs (such as IP address, browser type and pages requested) for security and to operate the site. If you accept ad measurement, the OpenAI ads pixel also collects the information described in section 6.

4. How we use personal information

We use personal information to:

• respond to your inquiry, assess whether we can help, and prepare a quote;
• provide our accounting and tax services, manage client accounts and process payments;
• protect our website and forms from spam, fraud and abuse;
• understand which of our pages lead to inquiries;
• if you accept, measure whether our ads in ChatGPT lead to inquiries;
• send updates or newsletters you have asked to receive (you can opt out at any time); and
• meet our legal, professional and regulatory obligations.

We do not sell personal information. We do not use it for any other purpose without your consent, unless the law permits or requires it.

5. Cookies and similar technologies

When the OpenAI pixel runs, OpenAI’s content-delivery and security provider may also set short-lived security cookies on OpenAI’s own domains.

Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

6. Ad measurement with the OpenAI pixel (only with your permission)

We advertise in ChatGPT. On the pages where we measure ad results, we ask whether you accept ad measurement. Until you accept, the OpenAI pixel does not load and nothing is sent to OpenAI.

If you accept:

• after you accept, the pixel loads on the service and contact pages where it is used and may receive technical information about that visit. If you successfully submit an inquiry form, we send an inquiry event with a random event ID. We do not include your message or answers about your tax situation in that event;
• if you arrived from one of our ads, the pixel stores the ad’s click reference in the __oppref cookie and a random browser reference in the __obref cookie, so that an inquiry can be linked to the ad; and
• the pixel’s automatic advanced matching may detect an email address or phone number you enter in a form. Your browser standardizes it and converts it into a one-way coded value (a SHA-256 hash), and only that coded value is sent to OpenAI to help match the visit to an ad. OpenAI states that raw contact details are not sent through this feature.

OpenAI handles this information under its own privacy policy, and it may process it in the United States.

If you decline, the pixel does not load. You can still use our site and submit our forms.

You can change your choice at any time with the button below. If you withdraw consent, we stop the pixel on our pages and delete its cookies from your browser.

Your ad-measurement choice: Not chosen yet Change my choice

7. Who we share information with

We share personal information only as needed for the purposes above:

• Our team. Inquiry and payment notifications are emailed to the Lepore & Company staff who handle them.
• Service providers that work on our behalf:
  • our website host;
  • Google, which provides our email service and reCAPTCHA;
  • Stripe, which processes online invoice payments. Card details you enter go directly to Stripe’s secure payment fields, and we do not receive your full card number. Stripe may email you a payment receipt and uses payment and device information to help prevent fraud. If you choose Stripe’s Link option, Stripe stores your payment details under its own terms;
  • the software providers we use to deliver our services.
  These providers may use the information only to provide their services to us.
• OpenAI, only if you accept ad measurement (section 6).
• Tax authorities and government bodies, such as the Canada Revenue Agency and Revenu Québec, when you instruct us to act for you or the law requires it.
• Legal authorities, if the law requires it.

8. Where information is stored and processed

Some of our service providers, including Google, Stripe and OpenAI, may store or process personal information outside Québec and outside Canada, including in the United States. Information processed in another country is subject to that country’s laws and may be accessible to its authorities. We choose providers that commit to protecting personal information.

9. How long we keep information

• Inquiries that do not become engagements: deleted once 24 months have passed since our last contact with you. This includes form entries and related notification emails. We carry out these deletions every three months.
• Client records and online payment records: kept for as long as needed to provide our services and to meet our professional, accounting and legal record-keeping obligations.
• Cookies and browser storage: as shown in section 5.

10. How we protect information

We use administrative, technical and physical safeguards to protect personal information from unauthorized access, use, alteration or loss. No method of transmitting information over the internet is completely secure.

11. Your rights

Subject to legal and contractual limits, you can:

• ask to access the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• withdraw your consent, including your ad-measurement choice (section 6);
• ask us to delete information where applicable; and
• opt out of marketing messages at any time.

To make a request, contact the person named in section 2. We respond to access requests within the applicable legal deadline, normally 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or, if you live in Québec, the Commission d’accès à l’information du Québec.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new “Last updated” date.

13. Contact us

Lepore & Company CPA
145 Highway 8, Stoney Creek, ON L8G 1C1
Email: support@lepore-ca.com
Phone: (905) 561-1278