Sourcestone.aiPrivacy and cookie notice
This notice explains how Sourcestone handles personal information collected through this website and how optional Google Analytics cookies are used.
Last updated: 18 August 2026
1. Who we are
Sourcestone AI Ltd, registered in England and Wales with company number 16333073, is the controller responsible for personal information described in this notice. In this notice, “Sourcestone”, “we”, “us” and “our” refer to that organisation.
Privacy enquiries may be sent to privacy@sourcestone.ai or by post to 3rd Floor, 86–90 Paul Street, London, EC2A 4NE. Our ICO registration number is ZC027563.
2. Information we collect and how we collect it
We may collect:
- information submitted through the pilot enquiry form, including name, work email address, firm, product interest and any optional message;
- correspondence and information provided when you communicate with us;
- technical and security information that may be processed when the website or its server-side contact function is used, such as IP address, request time, requested URL, browser or user-agent information, and diagnostic log information; and
- website usage information through Google Analytics, but only after analytics consent has been given, such as pages viewed, selected interactions, referral source, approximate location, and device and browser information.
We collect information directly from you when you submit the form or contact us, automatically from your browser and our hosting infrastructure when you use the website, and through Google Analytics reports where you have consented to analytics.
3. Why we use information
| Purpose | Information | UK GDPR basis | Retention |
|---|---|---|---|
| Respond to enquiries and discuss a potential pilot or service | Contact and enquiry information | Our legitimate interests in responding to business enquiries and, where applicable, steps requested before entering a contract | 24 months after our last interaction, unless the enquiry leads to a customer relationship, in which case relevant information follows our customer and legal records retention schedule |
| Operate, secure and diagnose the website and contact function | Limited technical and security logs | Our legitimate interests in maintaining a secure and reliable service | 30 days under our current service-provider plans; limited security, compliance or backup records may be retained for longer where necessary |
| Understand website use and improve content | Consented analytics information | Your consent, which may be withdrawn at any time | GA4 event-level data is configured for 14 months; aggregate reporting may remain longer |
4. Contact enquiries
The contact form sends the submitted information through service providers that host the website, operate the server-side contact function and deliver the enquiry by email to the appropriate Sourcestone recipient. Form contents are not sent to Google Analytics.
5. Cookies and similar technologies
Strictly necessary local storage remembers your analytics choice. Optional Google Analytics technology is used only after you select “Accept analytics”. Rejecting analytics does not prevent you from using the website or submitting an enquiry.
| Name | Provider | Purpose | Typical duration |
|---|---|---|---|
sourcestone.analytics-consent | Sourcestone | Stores the consent choice, policy version and choice time. This is browser local storage rather than a cookie. | Until the choice is changed, the policy version changes, or browser storage is cleared |
_ga | Google Analytics | Distinguishes browsers for consented analytics reporting | Up to 2 years |
_ga_* | Google Analytics | Maintains the state of a consented GA4 session | Up to 2 years |
Google Analytics is configured with advertising storage, ad personalisation, Google Signals and user-provided data collection disabled. We do not send names, email addresses, firm names or enquiry messages to Google Analytics.
You can change your analytics choice at any time using “Cookie settings” in the website footer. You can also delete cookies and local storage, or block cookies, using your browser settings. Blocking optional analytics does not affect the website’s core functions.
6. Who receives information
We may share information with personnel who need it to respond to an enquiry and with service providers acting for us, including:
- providers that host the website and operate its server-side functions;
- providers that deliver contact-form email;
- Google Analytics, for optional consented website analytics; and
- professional advisers, regulators, courts or public authorities where reasonably necessary or legally required.
We do not sell personal information.
7. International transfers
Some service providers may process information outside the United Kingdom. Where required, we rely on applicable adequacy regulations or contractual safeguards such as the UK International Data Transfer Addendum or other legally recognised transfer mechanisms. Further information may be requested using the privacy contact above.
8. Security and retention
We use reasonable technical and organisational measures designed to protect personal information. We keep information only for as long as reasonably necessary for the purposes described above, including legal, accounting and security requirements.
9. Your rights
Depending on the circumstances, UK data-protection law may give you rights to request access, correction, deletion, restriction or portability of personal information, or to object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
To exercise a right, contact privacy@sourcestone.ai. We may need to verify identity before responding.
10. Complaints
Please contact us first so that we can try to resolve a concern. You may also complain to the UK Information Commissioner’s Office through ico.org.uk.
11. Changes to this notice
We may update this notice when our services, suppliers or legal obligations change.