Privacy Policy

01 Introduction

This Policy applies to information collected through our website and in the course of providing consulting services to automotive businesses, parts suppliers, and vehicle-related operations. It does not apply to the practices of third parties that we do not own or control. We encourage you to read this Policy in full to understand your rights and how your information is handled.

02 Information We Collect

We collect information that you provide directly to us, as well as certain information automatically when you use our website. The categories of information we may collect include:

• Contact details you submit through our forms, such as your name, company name, and email address;
• The content of inquiries, project descriptions, and communications you send to us;
• Business information you share during an engagement that is relevant to the services;
• Technical data such as browser type, device information, and general usage patterns;
• Information from cookies and similar technologies, where applicable.

You are not required to provide personal information to browse general areas of our website, but certain features, such as submitting an inquiry, require some information to function.

03 How We Use Information

We use the information we collect for legitimate business purposes, including to:

• Respond to your inquiries and provide the information or services you request;
• Deliver, manage, and improve our consulting services and deliverables;
• Communicate with you about engagements, scheduling, and project updates;
• Operate, maintain, and enhance the performance and security of our website;
• Comply with legal obligations and enforce our agreements.

04 Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following: your consent; the necessity of processing to perform a contract or take steps at your request prior to entering into a contract; compliance with a legal obligation; and our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights.

05 Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enable core functionality, remember your preferences, and understand how the website is used. You can typically control cookies through your browser settings, including refusing or deleting them. Disabling certain cookies may affect the functionality of some features. Where required, we will seek your consent before placing non-essential cookies.

06 Sharing and Disclosure

We do not sell your personal information. We may share information in limited circumstances, including:

• With service providers who perform functions on our behalf, under appropriate confidentiality obligations;
• When necessary to perform a consulting engagement, with your knowledge and direction;
• To comply with applicable law, legal process, or enforceable governmental requests;
• To protect the rights, property, or safety of Keystone, our clients, or others;
• In connection with a business transaction such as a merger, acquisition, or asset transfer.

07 Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When information is no longer needed, we take reasonable steps to delete it or to anonymize it in a secure manner. Retention periods may vary depending on the nature of the information and the context of the engagement.

08 Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials and for using secure means when transmitting sensitive information to us.

09 Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, which may include the right to access, correct, update, or delete your information, to object to or restrict certain processing, to withdraw consent where processing is based on consent, and to request a copy of certain information. To exercise any of these rights, please contact us using the details at the end of this Policy. We will respond consistent with applicable law and may need to verify your identity before acting on a request.

10 International Data Transfers

We are based in the United States, and information we collect may be processed in the United States or other locations where we or our service providers operate. Where information is transferred across borders, we take steps consistent with applicable law to protect it. By using our website or engaging our services, you understand that your information may be processed in jurisdictions that may have different data-protection laws than those in your own jurisdiction.

11 Children's Privacy

Our website and services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from individuals under the age of eighteen. If we become aware that we have inadvertently collected such information, we will take reasonable steps to delete it.

12 Third-Party Links

Our website or communications may contain references to third-party websites, tools, or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third party before providing your information to them.

13 Marketing Communications

From time to time, we may send you communications about our services where permitted by law. You may opt out of non-essential communications by following the instructions included in the relevant message or by contacting us directly. Please note that we may still send you service-related or transactional communications in connection with an active engagement.

14 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "last updated" date. Your continued use of our website or services after the changes take effect indicates your acceptance of the revised Policy. We encourage you to review this page regularly.