Privacy Policy
How we handle your data.
Introduction
Keystone AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Last updated: October 16, 2025
1. Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Fill out a contact form or request a consultation
- Subscribe to our newsletter or marketing communications
- Register for an account or use our services
- Communicate with us via email, phone, or chat
This information may include:
- Name and contact details (email, phone number, postal address)
- Business information (company name, job title, industry)
- Payment information (processed securely through third-party providers)
- Communications and correspondence with us
Automatically Collected Information
When you visit our website, we may automatically collect:
- Device information (IP address, browser type, operating system)
- Usage data (pages viewed, time spent, referring website)
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our services
- Respond to your inquiries and provide customer support
- Send you marketing communications (with your consent)
- Process payments and fulfil orders
- Analyse website usage and optimise user experience
- Comply with legal obligations and protect our rights
- Detect and prevent fraud or security issues
3. Legal Basis for Processing (UK GDPR)
Under UK GDPR, we process your personal data based on:
- Consent: You have given clear consent for us to process your data for specific purposes
- Contract: Processing is necessary to fulfil our contract with you
- Legal obligation: Processing is necessary to comply with the law
- Legitimate interests: Processing is in our legitimate business interests, provided it doesn't override your rights
4. Data Sharing and Disclosure
We may share your information with:
- Service providers: Third-party vendors who help us operate our business (hosting, analytics, payment processing, CRM systems)
- Business partners: When you've consented to share information for specific services
- Legal requirements: When required by law or to protect our rights
- Business transfers: In connection with a merger, acquisition, or sale of assets
We never sell your personal information to third parties.
5. Data Security
We implement appropriate technical and organisational security measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure backup and disaster recovery procedures
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Data Protection Rights (UK GDPR)
Under UK GDPR, you have the following rights:
- Right to access: Request a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent: Withdraw consent at any time (where processing is based on consent)
To exercise these rights, contact us at hello@keystoneai.uk or 01743293831.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Understand how you use our website
- Improve website performance and user experience
- Deliver personalized content and advertising
You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.
8. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymise it.
9. International Data Transfers
Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your information.
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: www.ico.org.uk