Privacy policy
Last updated: 20 October 2026
The short version
- We only collect what you give us (emails, chat messages, booking details) plus basic technical data our hosting needs.
- We use it to answer you, run discovery calls and deliver our services. We never sell it.
- Our website doesn't set tracking or advertising cookies.
- Some providers we use are in the US. Transfers are protected by recognised legal safeguards.
- You can ask to see, correct or delete your data at any time: blair@klyroautomation.co.uk.
1. Who we are
This website, klyroautomation.co.uk, is run by Klyro Automation ("Klyro", "we", "us"), based in Glasgow, Scotland. Klyro Automation is a partnership of Blair Sherlock and James Thomas. We are the data controller for the personal data described in this policy.
Contact for anything privacy-related: blair@klyroautomation.co.uk.
2. What we collect and why
| What | Why we use it | Lawful basis (UK GDPR) |
|---|---|---|
| Website assistant chats: what you type into the "Questions? Just ask." chat | To generate an answer to your question. Each message is first screened automatically, by fixed rules and by an AI check, to block misuse, off-topic requests and sensitive details. Messages that pass are sent to our AI provider to write a reply. Screening only decides whether the assistant answers. It has no other effect on you. | Legitimate interests (answering enquiries about our services) |
| Discovery call bookings: name, email, phone, company and any answers you give when booking | To arrange and prepare for your call, and follow up afterwards. | Steps taken at your request before entering a contract; legitimate interests |
| Emails and messages you send us | To reply and keep a record of our conversation. | Legitimate interests; contract, where you're a client |
| Client data: contact and billing details, project information | To deliver, invoice and support the work you've hired us for. | Contract; legal obligation (tax and accounting records) |
| Business contact details from public or licensed sources: name, job title, work email, company | To contact businesses that may benefit from our services (see section 3). | Legitimate interests (business-to-business marketing) |
| Technical data: IP address, browser type, pages requested | Logged automatically by our hosting and video providers to deliver the site securely and prevent abuse. | Legitimate interests (running a secure website) |
Please don't share sensitive information (such as health details or financial account numbers) in the website chat.
3. About the AI assistant
The chat on our homepage is an automated AI system, not a person. It only answers questions about Klyro and our services. Its answers are general information. They can be wrong, and they aren't a quote, an offer, a promise or professional (legal, tax, financial or other) advice. Prices, timelines and terms are only agreed in writing after a discovery call. Please don't enter payment, ID, login or health details.
3a. If we contacted you first
We sometimes contact businesses directly by email or phone. We get work contact details from business databases such as Apollo.io, company websites and other public business sources. We only contact people in their professional role about services relevant to their business.
Every email we send includes a way to opt out. If you'd rather not hear from us, reply "unsubscribe" or email blair@klyroautomation.co.uk and we'll add you to our suppression list so you aren't contacted again.
4. Who we share data with
We never sell personal data. We share it only with providers who help us run Klyro, under contracts that require them to protect it:
- Anthropic (AI provider, US): processes website chat messages to generate replies.
- Calendly (scheduling, US): handles discovery call bookings. Bookings are made through a Calendly account held by James Thomas, one of Klyro's partners. Booking details are used only to arrange and run your call with Klyro.
- Netlify, Inc. (website hosting, US): serves this website and runs the server function behind the website chat. It processes technical data such as IP addresses to deliver the site and prevent abuse.
- Email, CRM and outreach tools we use to run the business, such as our email provider, Apollo.io and GoHighLevel.
- Professional advisers (accountants, lawyers) and authorities where the law requires it.
5. International transfers
Some of these providers process data in the United States. Where data leaves the UK, we rely on recognised safeguards: the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") where a provider is certified, or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Website chats: we don't store chat conversations ourselves. They disappear when you close the page. Our AI provider may keep them briefly under its own retention terms for safety and abuse monitoring.
- Enquiries and call bookings that don't go further: up to 24 months, then deleted.
- Client records: for the length of our work together, then 6 years for tax and legal purposes.
- Outreach contacts: until you opt out or the details are no longer relevant. Opt-outs are kept permanently so we don't contact you again.
7. Cookies and similar technologies
This website does not set cookies or use tracking, analytics or advertising technologies. Fonts and page code are served from our own site. When you click a booking link, you'll go to Calendly, whose own cookie policy applies there. The demo video is hosted on our own website.
If we add analytics in future, we'll update this policy and ask for consent where the law requires it.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we use it, including objecting to direct marketing at any time
- receive your data in a portable format
- withdraw consent, where we rely on it
To use any of these rights, email blair@klyroautomation.co.uk. We'll respond within one month. We don't make decisions with legal or similarly significant effects about you based solely on automated processing.
US visitors: you can make the same requests, including to know, delete or correct your information, and we'll honour them. We do not sell or share personal information for cross-context behavioural advertising.
9. Complaints
If you're unhappy with how we've handled your data, please tell us first at blair@klyroautomation.co.uk and we'll look into it promptly. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Security
We use access controls, encrypted connections (HTTPS) and reputable providers to protect your data. No system is completely secure, but we'll notify you and the ICO where the law requires it if a breach affects you.
11. Children
Our services are for businesses. We don't knowingly collect data from anyone under 18.
12. Changes to this policy
We'll update this page if anything changes, and update the date at the top.