Privacy Policy

Effective Date: December 15, 2025

At Keystone, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or engage with our services.

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you use our services or contact us. This may include:

Name and contact details (email address, phone number, postal address)
Information submitted through contact forms or consultation requests
Professional information related to project inquiries
Communication preferences and feedback
Any other information you choose to provide to us

Information Automatically Collected

When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:

IP address and general location information
Browser type and version
Operating system and device information
Pages visited and time spent on our website
Referral source and exit pages
Cookie data as described in our Cookie Policy

Information from Third Parties

We may receive information about you from third-party services we use for analytics, marketing, or business operations. This information is collected in accordance with the privacy policies of those third parties.

How We Use Your Information

We use the information we collect for various purposes, including:

Providing, maintaining, and improving our services
Responding to your inquiries and consultation requests
Communicating with you about our services, updates, and relevant information
Analyzing website usage and improving user experience
Protecting against fraudulent or unauthorized activities
Complying with legal obligations and enforcing our terms
Marketing communications (only with your consent where required)
Conducting research and development for service improvement

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you have given us explicit permission to process your data for specific purposes
Contract Performance: When processing is necessary to fulfill our contractual obligations to you
Legitimate Interests: When we have a legitimate business interest that does not override your privacy rights
Legal Obligations: When we are required by law to process your information

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting business, or providing services to you, provided they agree to keep your information confidential
Legal Requirements: We may disclose your information when required by law, legal process, or government request
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
Protection of Rights: We may share information to protect our rights, property, or safety, or that of our users or others
With Your Consent: We may share your information for any other purpose with your explicit consent

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest where appropriate
Regular security assessments and updates
Access controls and authentication procedures
Secure data storage and backup systems
Employee training on data protection practices

However, please note that no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention period depends on various factors, including:

The nature of the information collected
The purposes for which it was collected and processed
Legal, regulatory, or contractual requirements
Our legitimate business needs

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

Right to Access: You can request access to the personal information we hold about you
Right to Rectification: You can request correction of inaccurate or incomplete personal information
Right to Erasure: You can request deletion of your personal information under certain circumstances
Right to Restriction: You can request that we limit the processing of your personal information
Right to Data Portability: You can request a copy of your data in a structured, commonly used format
Right to Object: You can object to certain types of processing, including direct marketing
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request in accordance with applicable data protection laws.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our contact page. We will process your request promptly and in accordance with applicable law.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer your personal information internationally, we take appropriate measures to ensure that your data receives an adequate level of protection, including:

Using standard contractual clauses approved by relevant authorities
Ensuring recipients are certified under recognized data protection frameworks
Obtaining your explicit consent for the transfer where required

Third-Party Links and Services

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by Keystone.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete that information as soon as possible. If you believe we have collected information from a child, please contact us immediately.

Marketing Communications

With your consent, we may send you marketing communications about our services, updates, and other information we think may interest you. You can opt out of receiving marketing communications at any time by:

Following the unsubscribe instructions in any marketing email we send
Contacting us directly to request removal from our marketing lists
Adjusting your communication preferences if you have an account with us

Please note that even if you opt out of marketing communications, we may still send you service-related messages that are necessary for our relationship with you.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the effective date at the top of this policy and may provide additional notice, such as through a prominent announcement on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Data Protection Officer

If you have questions about our privacy practices or how we handle your personal information, you may contact our data protection representative using the contact information provided below.

Complaints

If you believe we have not handled your personal information in accordance with applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. In the UK, this is the Information Commissioner's Office (ICO). However, we would appreciate the opportunity to address your concerns before you approach a supervisory authority, and we encourage you to contact us first.