Privacy Policy

1. Who We Are

Cairnstone Consultancy is an AI automation consultancy based in Fife. We help Scottish small and medium-sized enterprises adopt practical automation solutions to save time and reduce manual workload.

If you have any questions about this privacy policy or how we handle your data, you can contact us at hello@cairnstoneconsultancy.com.

2. What Data We Collect

We keep data collection to a minimum. Here is what we collect and why:

Contact form submissions

When you fill in our contact form, we collect your name, email address, company name (if provided), and your message. We use this information solely to respond to your enquiry.

Analytics data

We use Vercel Analytics to understand how visitors use our website. This data is anonymous and aggregated — it does not identify you personally. We collect information such as page views, referral sources, and general geographic region.

Cookies

Our website uses only essential cookies required for the site to function properly. We do not use advertising cookies, tracking cookies, or any cookies that require your consent beyond what is strictly necessary.

3. How We Use Your Data

We use the personal data you provide for the following purposes:

• To respond to your enquiries and provide the information you have requested.
• To improve our website and ensure it works well for visitors.
• To understand general usage patterns so we can make our content more useful.

We never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

Legitimate interest

When you contact us through our website, we have a legitimate interest in processing your data to respond to your enquiry and provide you with relevant information about our services.

Consent

Where you have explicitly given consent — for example, by opting in to receive updates — we process your data on the basis of that consent. You can withdraw your consent at any time by contacting us.

5. Data Retention

We do not keep your personal data for longer than necessary:

• Contact form submissions are retained for 12 months from the date of submission, after which they are permanently deleted.
• Analytics data is anonymised and aggregated, meaning it cannot be linked back to any individual.

6. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct any inaccurate or incomplete data.
• Right to erasure — You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.
• Right to data portability — You can request your data in a structured, commonly used format.
• Right to object — You can object to us processing your data where we rely on legitimate interest as our legal basis.

To exercise any of these rights, please contact us at hello@cairnstoneconsultancy.com. We will respond to your request within 30 days.

7. Data Security

We take the security of your personal data seriously and use industry-standard measures to protect it:

• Our website is served exclusively over HTTPS, ensuring all data transmitted between your browser and our servers is encrypted.
• Contact form submissions are transmitted securely and stored with appropriate access controls.
• We regularly review our security practices to ensure they meet current standards.

8. Third-Party Services

We use a small number of trusted third-party services to operate our website. These providers process data on our behalf and are bound by their own privacy policies:

• Vercel — Website hosting and analytics. Vercel Privacy Policy
• Formspree — Contact form processing. Formspree Privacy Policy

We do not use any other third-party services that process your personal data. Our website does not include social media tracking pixels or third-party advertising scripts.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated “Last updated” date at the top. We encourage you to review this page periodically to stay informed about how we protect your data.