Privacy Policy

Who We Are

Silicon and Stone is an independent analysis and advisory service focused on technology policy, AI regulation, semiconductor supply chains, and digital sovereignty. We are based in OrkneyScotland, United Kingdom.

What Data We Collect

We collect only what is necessary to provide our services:

• -Newsletter subscribers: Email address, and optionally your name. Stored by our email service provider (ConvertKit/Kit).
• -Contact form enquiries: Name, email, company (optional), area of interest, and your message. Stored by our email service provider.
• -Digital product purchases: Transaction data is processed by our payment provider (Lemon Squeezy). We do not store payment card details.
• -Website analytics: We use privacy-friendly analytics that do not track individual users or use cookies for tracking purposes.
• -Compliance Checker assessments: The interactive tools at /tools can be used without giving us anything. If you ask the AI Act Compliance Checker for a written report, we store the email address you give us, the report it generated, and a record of the consent wording you were shown. Your answers describe an AI system in your organisation, so treat them as commercially sensitive: we hold reports for 30 days and consent records for two years, we do not add the address to any mailing list unless you separately tick to say so, and we do not share either with anyone.
• -Assessments in progress: While you are working through a tool, your answers are saved against an anonymous identifier in a cookie so a refresh does not lose them. They expire after 24 hours and are not linked to you.

How We Use Your Data

• -To send you the newsletter you subscribed to
• -To respond to your enquiries
• -To deliver digital products you have purchased
• -To generate and deliver a tool report you asked for, and to answer you about it. This is separate from the newsletter: asking for a report does not subscribe you to anything
• -To understand how our website is used (aggregate, non-personal data only)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-Party Services

We use the following services to operate:

• -ConvertKit (Kit): Email newsletter management. Their privacy policy is available at kit.com/privacy.
• -Vercel: Website hosting. Their privacy policy is available at vercel.com/legal/privacy-policy.
• -Sanity: Content management. Their privacy policy is available at sanity.io/legal/privacy.

Toolkit Professional Review Materials

Professional buyers may submit selected workbook entries, company context and review questions to prepare their implementation discussion. These materials are used to prepare and deliver the review, with access restricted to Clive and the service providers needed to deliver it. Remove credentials and unnecessary personal data before submitting.

Booking and private file submission are not yet open. The selected providers and their privacy information will be identified before those services open. Workbooks will be deleted from the review service 30 days after the meeting. The public website and general contact form do not accept review workbooks.

Your Rights (GDPR)

Under the UK GDPR and EU GDPR, you have the right to:

• -Access the personal data we hold about you
• -Rectify inaccurate personal data
• -Erase your personal data (“right to be forgotten”)
• -Restrict processing of your personal data
• -Data portability
• -Object to processing
• -Withdraw consent at any time

To exercise any of these rights, contact us at hello@siliconandstone.com. You can also unsubscribe from our newsletter at any time using the link in every email.

Cookies

We use only essential cookies required for the website to function (such as authentication for the admin area). We do not use tracking cookies, advertising cookies, or third-party cookies for analytics.

Contact

For any questions about this privacy policy or how we handle your data, email us at hello@siliconandstone.com.