Privacy notice
What Cairnova Technologies Ltd does with personal data when you visit this website or get in touch with us. Short, because there is not much to say: this site collects nothing, and we keep what you send us only for as long as it takes to deal with it.
Last reviewed 9 October 2026. Covers cairnova.io and our handling of enquiries. Each product has its own data processing agreement and privacy documentation, provided under contract.
Who we are
- Controller
-
Cairnova Technologies Ltd, company number SC894280, registered office Office 533, Unit Lge, 18 Young Street, Edinburgh EH2 4JB. Registered with the Information Commissioner’s Office, reference ZC251036.
- Data protection contact
-
info@cairnova.io, marked for the attention of the data protection lead. We are below the threshold at which a statutory data protection officer is required; the founder holds the role.
This website
- Cookies and tracking
-
None. This site sets no cookies, runs no scripts, embeds nothing from a third party, and uses no analytics. There is nothing to consent to and so no banner asking you to.
- Server logs
-
The site is served through Cloudflare, which handles the connection and in doing so processes your IP address and request details in the ordinary way any web server does, for security and to serve the page. We do not use those logs to identify or profile visitors.
- Fonts and assets
-
Fonts and images are served from this domain. Your browser makes no request to a font service or a content network run by anyone else, and the site’s security policy forbids it from doing so.
When you contact us
- What we hold
-
If you email or telephone us, we hold what you give us: your name, your organisation, your contact details and the content of the enquiry, together with our reply.
- Why, and on what basis
-
To answer you, to follow up on a conversation you started, and to take the steps you ask us to take towards a contract. Our lawful basis is our legitimate interest in responding to people who contact us and, where you are considering buying from us, the steps necessary before entering into a contract. We do not add you to a marketing list and we do not send newsletters.
- Where it is held
-
In our business mailboxes and, where it belongs there, in our own systems, hosted in the United Kingdom. We do not transfer enquiry data outside the UK.
- How long we keep it
-
For as long as the conversation is live, and for up to two years after our last contact so that we can pick it up if you come back. Where an enquiry leads to a contract, the correspondence becomes part of the contract record and is kept for the life of the contract and six years after it ends. Security vulnerability reports are kept for as long as the report is relevant to a system we run.
- Who sees it
-
The people at Cairnova who deal with your enquiry. We do not sell, share or pass enquiry data to anyone else, except where the law requires it.
Our products
When an organisation uses one of our platforms, that organisation is the controller of the data in it and we act as its processor on its instructions, under a data processing agreement based on Article 28 of the UK GDPR. The privacy notice that applies to you as a user of one of those systems is published by the organisation that deploys it, not by us. Technical and organisational measures, subprocessors and hosting are set out in the trust centre.
Your rights
You can ask us what we hold about you, ask us to correct it or delete it, object to our processing it, or ask for a copy in a portable form. Write to info@cairnova.io and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.
Changes to this notice. We will update this page when anything here changes and move the review date at the top. The version you are reading is the current one.