Privacy Policy

Who we are

Qeystone (“Qeystone,” “we,” “us,” or “our”) is operated by Qeystone Holdings LLC. This policy explains what information we collect through qeystone.co, why we collect it, where it is stored, and the choices you have over it. It applies to this website and to the enquiries you send us through it.

Information we collect

We only collect information you choose to give us. Every form on this site — the contact form and the enquiry forms on our service and industry pages — asks for the same details:

• Name — so we know who we are talking to.
• Business name — so we can look at your business before we reply.
• Email address — so we can respond to your enquiry.
• Phone number — so we can reach you if you would rather talk.
• Service you are interested in — so your enquiry reaches the right person.
• Industry — so we can tailor what we send you.
• Your message — the free-text field, and anything you choose to put in it.

When you submit a form, we also record the page you submitted it from and the date and time you submitted it. We use this only to understand which enquiry a message relates to and to reply with the right context.

We do not ask for, and have no use for, payment details, government identifiers, or any sensitive personal information through this website. Please do not include such details in the message field.

Cookies and tracking

This website does not use advertising or analytics tracking. We do not run Google Analytics, we do not run a Facebook or LinkedIn pixel, and we do not set tracking or advertising cookies on your browser.

Some parts of the site are delivered from third-party content networks — web fonts from Google Fonts, and standard scripting libraries from their public CDNs. As with any request your browser makes on the internet, those providers necessarily receive your IP address in order to send the file back. We do not control those requests beyond choosing to load the file, and we receive no analytics or profile about you from them.

Google Search Console and Google Analytics data (for clients)

As part of our SEO & GEO service, we connect to a client’s own Google Search Console and Google Analytics accounts, with their explicit permission, to review and improve their website’s search performance.

What this covers: Only clients who have engaged us for SEO & GEO services and who have granted us access through Google’s own authorization process. This is separate from — and does not change — how we handle visitors to qeystone.co itself; as stated above, we do not run Google Analytics or any tracking on our own website.

What we access: With a client’s authorization, we may access data from their Google Search Console and Google Analytics properties, including search rankings, impressions, clicks, click-through rates, and website traffic data for their own site.

Why we access it: To diagnose SEO opportunities, track performance over time, and inform the recommendations and work we deliver as part of our SEO & GEO service.

How we use it: This data is used solely to provide services to the client it belongs to. We do not use one client’s data to inform another client’s strategy, and we do not use it for any purpose outside delivering the service they’ve engaged us for.

Where it’s stored: Like other information described in this policy, this data is held in our Supabase database, with access restricted to Qeystone personnel who need it to deliver the service.

Revoking access: A client can revoke our access to their Google Search Console or Google Analytics account at any time, directly through their own Google Account permissions.

Where your information is stored

When you submit a form, the details are passed to our automation service, which routes the enquiry to the right place and stores it in our databases. Your information is held in MongoDB and Supabase, the two databases behind our systems. Access is restricted to Qeystone personnel who need it to respond to you and to deliver our services.

How we use your information

• To respond to your enquiry — replying by email or phone, and answering your questions.
• To provide our services — scoping, proposing, and delivering the work you have asked us about, and communicating with you while it is under way.
• For internal business purposes — keeping records of enquiries, understanding which services people ask about, and improving how we operate.

We will not add you to a general marketing list on the strength of a single enquiry, and any marketing email we do send you will always give you a way to opt out.

Who we share it with

We do not sell your personal information. We do not rent, trade, or otherwise disclose it to third parties for their own marketing.

We do rely on a small number of service providers to run our business, and your information passes through them only so that they can perform that service for us:

• n8n — the automation service that receives your form submission and routes it to us.
• MongoDB and Supabase — where the enquiry is stored.
• Resend — the provider we use to send email to you.
• Twilio — the provider we use to send SMS messages to you.
• Cal.com — the scheduling tool we use if you book a call with us. If you go on to book, the details you enter there are handled under Cal.com’s own privacy policy.
• SE Ranking — the SEO and search-performance data provider we use to support our SEO & GEO service.

We may also disclose information where we are legally required to — for example, in response to a valid legal request, or where necessary to establish or defend a legal claim.

How long we keep it

We keep enquiries for as long as we need them to respond to you, to deliver the services you engage us for, and to keep ordinary business records afterwards. When information is no longer needed for any of those purposes, we delete it. You can ask us to delete it sooner — see below.

Your rights and choices

Whatever jurisdiction you are in, you can ask us to:

• Tell you what we hold — we will send you a copy of the information we have about you.
• Correct it — if something we hold is wrong or out of date, we will fix it.
• Delete it — we will remove your information from our databases, unless we are required to keep some of it by law.
• Stop contacting you — we will stop, and we will keep only the minimum needed to honour that request.

To make any of these requests, email us at [email protected]. We will confirm we have received your request and act on it within a reasonable period, and in any event within 30 days. We will not charge you for it, and we will not treat you differently for having asked.

Security

We take reasonable measures to protect the information you give us, including restricting access to it and relying on established providers to store it. No method of transmission or storage on the internet is completely secure, so while we work to protect your information, we cannot guarantee absolute security.

Children

This site is intended for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us their information, contact us and we will delete it.

Changes to this policy

If we change how we handle your information, we will update this page and revise the “last updated” date at the top. If the change is significant, we will take reasonable steps to let affected people know.