Do not send Social Security numbers, taxpayer-identification numbers, dates of birth, account credentials, bank information, tax returns, financial statements, medical information or copies of identity documents through this website. Lilly Financial will provide an approved delivery method when sensitive information is required for an accepted engagement.
1. Scope of this Notice
This Website and Inquiry Privacy Notice applies to information processed by Lilly Financial Management Services, Inc. (“Lilly Financial,” the “Company,” “we,” “us” or “our”) when an individual visits lillyfinancial.net, submits the public contact form, or communicates with the Company concerning a possible engagement.
This Notice does not govern information handled under an accepted client engagement and does not replace a client financial-privacy notice, engagement agreement, tax-information consent, secure-portal notice or other service-specific notice. When applicable, Lilly Financial provides a separate client financial-privacy notice during onboarding at or before the time required by law. A signed engagement and any mandatory regulatory document control their respective subjects.
Visiting the Site, submitting an inquiry or exchanging preliminary communications does not, by itself, create an accountant-client, adviser-client, fiduciary or other professional relationship.
2. Information we collect
2.1 Information provided voluntarily
The public contact form requests a name, email address and message. We may also receive information included in subsequent emails, telephone calls, scheduling communications or other correspondence initiated by the individual.
2.2 Technical and security information
When the Site or contact form is used, the Company and its service providers may process an Internet Protocol address, browser and device information, user-agent string, date and time information, requested pages, referral information, network and security events, and information used to distinguish legitimate users from automated or abusive traffic. When a contact form is successfully submitted, the Site currently records the submitter’s IP address and user-agent string with the submitted name, email address and message.
2.3 Information not intentionally requested
The public contact form is intended only for preliminary business inquiries. It is not designed to receive taxpayer records, financial-account information, authentication credentials, protected health information, government identification numbers or other highly sensitive information.
3. How we use information
We may use information described in this Notice to:
- receive, evaluate and respond to inquiries;
- determine whether a requested service is within the Company’s current professional scope;
- schedule consultations and prepare proposed engagement terms;
- operate, secure, troubleshoot and maintain the Site and contact form;
- detect, prevent and investigate spam, fraud, abuse, malicious activity and security incidents;
- maintain appropriate business, compliance and correspondence records;
- establish, exercise or defend legal rights; and
- comply with applicable law, regulation, professional obligations, legal process and lawful governmental requests.
4. When information may be disclosed
We do not sell or rent contact-form information. We do not disclose inquiry information for third-party behavioral advertising. Information may be disclosed only as reasonably necessary in the following circumstances:
- Service providers. Vendors that provide website hosting, database, bot-detection, security, email, productivity, scheduling, records-management or technical-support services may process information on the Company’s behalf and subject to applicable contractual or legal restrictions.
- Professional advisers. Information may be disclosed to attorneys, insurers, auditors, tax professionals, security consultants or other advisers when reasonably necessary to obtain advice, satisfy an obligation or protect the Company or another person.
- Legal and safety requirements. Information may be disclosed when the Company reasonably believes disclosure is required or permitted by law, regulation, subpoena, court order, legal process, governmental request, or is necessary to investigate unlawful activity, prevent harm, protect rights or maintain security.
- Corporate transactions. Information may be transferred as part of a proposed or completed merger, financing, reorganization, sale of assets, acquisition, dissolution or similar transaction, subject to applicable confidentiality and legal requirements.
- Direction or consent. Information may be disclosed at the individual’s direction or with legally sufficient authorization.
5. Cloudflare hosting, database and Turnstile
The Site uses Cloudflare Pages and related Cloudflare infrastructure. Contact-form submissions are stored using Cloudflare D1. The form is protected by Cloudflare Turnstile, which evaluates technical and browser signals and issues a verification token used to distinguish legitimate submissions from automated or abusive traffic. The Site sends that token, and may send the submitting IP address, to Cloudflare for server-side validation.
Cloudflare processes information under its own terms and privacy documentation as applicable to its services. Additional information is available in Cloudflare’s Privacy Policy, Turnstile Privacy Addendum and Data Processing Addendum.
6. Tax-return and client information
If Lilly Financial accepts a tax-preparation or related engagement, information furnished for preparation of a tax return may be subject to additional federal and state confidentiality, use and disclosure restrictions, including applicable provisions of the Internal Revenue Code and Treasury Regulations. Where legally required, a separate written consent must be obtained before tax-return information is used or disclosed for a purpose not otherwise authorized by law.
This Notice and any later client financial-privacy notice are not consents to use or disclose tax-return information and are not intended to satisfy a consent requirement under Internal Revenue Code section 7216 or related Treasury Regulations. When consent is legally required, it must be obtained separately for the specific use or disclosure. Client information must be delivered only through methods approved for the applicable engagement.
7. Retention
Information is retained only for as long as reasonably necessary for the purposes described in this Notice, including evaluating and responding to an inquiry, maintaining business and compliance records, resolving disputes, enforcing agreements, protecting security, and satisfying legal, tax, insurance or professional obligations. Retention periods may vary according to the nature of the information, the relationship, applicable limitation periods and legal requirements.
Information may be deleted, anonymized or retained in restricted archives when no longer required for an active business purpose, subject to lawful preservation obligations and technically necessary backup cycles.
8. Information security
Lilly Financial uses administrative, technical and physical safeguards selected in light of the information involved, the Company’s operations, reasonably foreseeable risks and applicable requirements. For this public Site, verified measures include HTTPS delivery, Cloudflare D1 encryption as described in Cloudflare’s documentation, server-side Turnstile validation and deliberately limited contact-form fields. Client-engagement safeguards are addressed through approved systems, internal procedures and engagement-specific requirements.
No website, transmission method, database or security program can be guaranteed to be completely secure. Individuals should not use the public Site to transmit information that requires a secure client-delivery channel. If an individual believes information submitted to Lilly Financial may have been compromised, the individual should contact the Company promptly.
9. Privacy choices and requests
Subject to applicable law and appropriate identity verification, an individual may request information about the Company’s handling of the individual’s personal information, or request access, correction or deletion. The Company may decline or limit a request when permitted or required by law, including when information must be retained for legal, security, tax, recordkeeping, contractual or dispute-resolution purposes, or when disclosure would adversely affect another person’s rights.
The Company will not discriminate against an individual for making a privacy request protected by applicable law. A request may be submitted using the contact information in Section 12.
11. Other provisions
11.1 Children
The Site is intended for businesses and adults seeking professional services. It is not directed to children under 13, and the Company does not knowingly solicit personal information from children through the Site.
11.2 External websites
The Site may link to websites operated by third parties. Lilly Financial is not responsible for the privacy, security or content practices of an unaffiliated third party. Individuals should review the third party’s notices before providing information.
11.3 Changes to this Notice
The Company may revise this Notice to reflect changes in law, services, technology, vendors or business practices. The revised Notice will be posted at this location with an updated effective or revision date. Material changes may also be communicated by another reasonable method when required by law.
12. Contact
Privacy questions or requests may be directed to:
Lilly Financial Management Services, Inc.Email: hello@lillyfinancial.net
Subject line: Privacy Request