Privacy Policy
This policy explains what personal data Cairnwise collects, why we use it, who we share it with, and the rights you have. It covers UK GDPR, EU GDPR and the California Consumer Privacy Act (CCPA/CPRA).
- Operator:
- STROME PROJECT CONSULTING LIMITED
- Registered office:
- 8 St. Anns Place, Haddington, East Lothian, EH41 4BS, United Kingdom
- Contact:
- support@stromeproject.shop · +44 7457608013
- Last updated:
- 2026-07-12
1. Who is responsible for your data
STROME PROJECT CONSULTING LIMITED (“Cairnwise”, “we”, “us”) is the data controller for personal data processed through stromeproject.shop. Our registered office is 8 St. Anns Place, Haddington, East Lothian, EH41 4BS, United Kingdom. For any privacy question, contact support@stromeproject.shop or call +44 7457608013.
2. What we collect
We collect only what we need to run the service:
- Contact information and account data: name, email address, phone number if provided, and authentication details.
- Subscription and billing data: plan, billing interval, subscription status and invoices. Card payments are processed by Stripe; we never receive or store your full card number.
- Project inputs: the briefs, goals, deadlines, team roles, constraints, risks and any text you enter into the workspace to generate a plan.
- Generated outputs: the roadmaps, RACI matrices, risk registers, walkthrough outlines and Project Briefs produced from your inputs.
- Support and enquiry data: messages you send through the contact or team-enquiry forms.
- Technical and usage data: IP address, device and browser type, and basic interaction logs used to keep the service secure and working.
3. Collection sources and where we collect it from
Directly from you (when you create an account, subscribe, use the workspace or contact us), and automatically from your device (server and security logs, essential cookies). We also receive limited confirmation data from our payment processor when a subscription is created or changes.
4. Why we use it and our legal bases
- To provide the service (generate plans, store and export your projects) — performance of a contract.
- To take payment and manage subscriptions — performance of a contract and legal obligation.
- To provide support and respond to enquiries — legitimate interests and contract.
- To keep the service secure and prevent abuse — legitimate interests and legal obligation.
- To improve the service using aggregated, non-identifying usage patterns — legitimate interests.
Under CCPA, these are “business purposes”. We do not use your project inputs for advertising.
5. AI processing of your inputs and outputs
When you generate a plan, your brief is processed to produce structured output. Where an AI model provider is configured, the relevant text of your brief may be sent to that provider solely to generate your result. We do not use your inputs, uploads or generated outputs to train any AI model.The AI provider processes the minimum necessary prompt text only to return your requested output. You can request deletion of your project data at any time (see section 9). Do not enter other people's confidential information or personal data into the workspace without a lawful basis to do so.
Your user input, generated output and optional exported files are used only to operate the planning workspace, provide support and maintain your subscription records.
6. The payment provider boundary
Payments are handled by Stripe, our payment processor. When you check out you enter your card details directly with Stripe. Cairnwise does not see, receive or store your full card number, CVC or expiry. We receive only the confirmation and subscription metadata needed to activate and manage your plan.
6A. Digital delivery only
Cairnwise is an online-only digital subscription with no physical goods, shipping, installation, fulfilment or on-site services. We do not collect delivery addresses because nothing is shipped.
7. Who we share it with
We share personal data only with processors who help us run the service, under contract:
- Hosting and deployment: our cloud hosting provider.
- Payments: Stripe (payment processing and subscription management).
- Database and storage: our managed database and file storage provider.
- Email: our email delivery provider for transactional and support email.
- AI model provider: where configured, to generate your plan text only.
We do not sell your personal data and we do not share it for cross-context behavioural advertising. We may disclose data where required by law.
8. International transfers
Some processors may process data outside the UK or EEA. Where they do, we rely on appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses with the UK addendum.
9. How long we keep it
We keep account and subscription data for as long as your account is active and as required for legal, tax and accounting purposes afterwards. Project inputs and generated outputs are retained while your account is active and deleted on request or within a reasonable period after account closure. Support messages are kept only as long as needed to resolve and record the matter.
10. Your rights (UK/EU GDPR)
You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any right, email support@stromeproject.shop. You can also complain to the UK Information Commissioner's Office (ICO) or your national data protection supervisory authority.
11. Your rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, to access and delete it, to correct it, and to be free from discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. To make a request, email support@stromeproject.shop.
12. Cookies and analytics
We use essential cookies to keep you signed in and to secure the service. Any analytics we use is privacy-respecting and aggregated. See our Cookie Policy.
13. Automated decisions and children
Cairnwise generates planning suggestions but does not make legal or similarly significant automated decisions about you. The service is not for children: it is not available to anyone under 13, and users aged 13–17 must have verifiable consent from a parent or guardian.
14. Security
We use encryption in transit, access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and will notify you and the relevant authority of a qualifying breach as required by law.
15. Changes and contact
We may update this policy and will change the “last updated” date above. For any privacy request or question, contact STROME PROJECT CONSULTING LIMITED at support@stromeproject.shop, +44 7457608013, 8 St. Anns Place, Haddington, East Lothian, EH41 4BS, United Kingdom.