Legal
Privacy policy
I collect as little information as I can, do not sell it and will deal with a reasonable request about your data. This page explains the detail.
Who is responsible for your data
This site is operated by Keystone AI App Ltd, which is responsible for the personal data described in this policy. Its address is Unit 6-7 March Way, Shrewsbury, United Kingdom, SY1 3SY. If you want to ask about your data, email sales@keystoneai.uk or use the Work With Me page.
What I collect
- Information you send me: the name, email address, business name and message you enter into an enquiry, resource-request or checklist form.
- Basic usage information: pages visited and general technical details, such as browser type, used to understand which pages are useful.
I do not ask for special-category data. Please do not send confidential financial or tax documents through a web form.
Why I collect it
I use this information to reply to an enquiry, send a resource you asked for and improve the site. The legal bases are consent, where you ask for a resource or updates, and legitimate interests, where I need to reply to an enquiry or maintain the site.
Who may process it
Information may be processed by providers that host the site, deliver email or provide analytics. Form submissions are processed by Resend so they can be forwarded to Chris’s inbox and, where requested, send you the resource you asked for. Business Opportunity Conversation enquiries are stored in Supabase for reliable delivery and sent to GoHighLevel for contact, opportunity and appointment management. The site’s chat widget is provided by GoHighLevel. I do not sell your information. Where an enquiry clearly belongs with one of my companies, I may pass it to that company so its team can respond.
Operator Day registrations
If you register interest in an Operator Day, I collect your contact details, role, business information and the answers you provide so I can consider whether a future room is a useful fit for you and whether your experience fits the group. Registration does not guarantee an invitation. The submission is stored in Supabase for reliable delivery, sent to GoHighLevel for contact and cohort management, and forwarded to me by Resend. Resend also sends the immediate acknowledgement you requested by submitting the form. I use the permission given on the form only to contact you about Operator Days; you can withdraw it at any time.
Business Fix purchases
Stripe processes payment details. This site receives the checkout reference, product, amount, payment status and customer email needed to fulfil an order; it does not store full card details. Purchase records and secure download grants are stored in Supabase. Resend delivers the receipt, access email and time-limited product support sequence. Purchase support emails are transactional and do not add a buyer to a marketing list.
Business Bottleneck Scorecard
The free assessment uses 15 selected answers to calculate indicative improvement scores and practical priorities. It uses fixed rules, not AI or financial forecasts. You can see the results without providing contact details.
If you ask for an emailed action plan and agree to share it with Chris, your name, email, optional business name, responses, scores and the recorded permission are stored in Lovable Cloud’s private website enquiry records. Resend delivers the requested result and Chris’s notification. GoHighLevel receives your contact details and a note of the self-reported responses and scores so Chris can prepare for a conversation. This does not create a paid engagement or subscribe you to marketing. Completed delivery records follow the 180-day enquiry retention described below; you can request access or deletion using the contact details above.
Owner Dependency Check
The check uses your selected answers to suggest an indicative priority and a relevant next action. These answers are information you supplied, rather than verified facts. No AI service receives the answers in this check. A separate detailed work-mapping interview is available among the supporting tools and explains its own processing.
To keep the journey working, this browser session retains your check answers and the current entry page or campaign source. It does not retain a general browsing history. “Remember this result” optionally keeps that context on this browser for 30 days from your last update. You can remove it using “Forget my check” on the result.
If you request an emailed result, Supabase stores the email and answers to generate a private result link valid for 30 days. Those records are removed after 90 days by the scheduled cleanup. Resend delivers the email. Three problem-specific follow-ups at approximately days 2, 5 and 10 require a separate unchecked opt-in. Each has an unsubscribe link. Reporting may count requested delivery and the outcome you choose to record. Email requests do not automatically subscribe you to marketing.
If you separately choose to share context with Chris, only a short, clearly indicative summary is attached to your GoHighLevel contact. Individual answers are not sent to the CRM. This choice does not create a sales opportunity or subscribe you to marketing.
You can choose to include your check with a Review application. The information is forwarded to Chris's existing inbox and recorded securely so he can assess the issue. Review application contact details and the answers you submit are also added to Chris's GoHighLevel contact and Review opportunity. If the Review goes ahead, its stage and a concise summary of an approved report are recorded there. Raw meeting transcripts, source documents, evidence quotations and draft reports stay in the private Review workspace; they are not copied to GoHighLevel. A meeting source is sent to the AI gateway only when approval for that source has been recorded in the workspace. Unprogressed or unsuitable application records are removed after one year. Records relating to an agreed engagement are kept with the work that follows.
Enquiry and purchase correspondence
Enquiry correspondence is kept for as long as it is needed for the enquiry and any work that follows, then deleted. Completed website delivery records are removed after 180 days; pending records remain until delivery or manual resolution. Marketing contacts are kept until you unsubscribe or ask to be removed.
Your rights
Under UK GDPR you can ask for access to your data, correction, deletion, restriction or portability. You can object to processing and withdraw consent where consent is the basis. You can also complain to the Information Commissioner's Office.
Cookies and analytics
Optional progression analytics is off until you allow it in Privacy preferences. It records commercial events using a session reference, the dependency category, recommendation, page, campaign and experiment variant. It excludes names, emails, free-text answers and confidential business figures. When allowed, these references can accompany Stripe checkout to connect a confirmed purchase with the recommendation. Progression events are removed after 180 days by scheduled cleanup. No advertising tracker is added. Your privacy choice is remembered for 180 days, and you can change it through Privacy preferences at the bottom of every page. Declining optional analytics does not prevent you using the check, forms or checkout.
Links to other websites
Links to third-party tools and services, including affiliate links, take you to websites with their own privacy policies. See the affiliate disclosure for how those commercial relationships work.
Changes to this policy
I may update this page as the site changes. Any material change will be reflected here.