Privacy policy

Last updated 5 October 2026

This policy explains what information Kilpatrick Strategic ("we") handles through this website and through the firm's own internal operator tools, why, and the choices you have.

This website

This website has no accounts, no contact form, no advertising and no analytics or tracking scripts. It sets no cookies of its own. Like any website, the companies that host and deliver it keep standard technical logs (such as IP address, browser type and the pages requested) to operate and secure the service; we do not use those logs to identify or profile visitors.

When you write to us

If you email us, we receive your message, your address and anything you choose to include. We use it only to reply and to carry on the conversation or engagement you started. We do not add you to a mailing list without asking, and we do not sell or share your correspondence.

Our operator tools and Google user data

We run a small set of internal tools for the firm's own operations. These tools are used only by the firm; they are not offered to the public. One of them connects to Gmail through Google's APIs, with your consent where the mailbox is yours, in order to read and organise the firm's own business correspondence.

• What we access: read-only access to Gmail messages and labels (the gmail.readonly scope), and only for mailboxes belonging to the business that have been connected deliberately. The tools cannot send, change, label or delete mail.
• How we use it: to search, read and triage the business's own correspondence for the people who run the business. Nothing else.
• Where it is kept: on the business's own computers. Access tokens and any message content the tools keep stay on those machines.
• What we never do: we never sell this data and never use it for advertising. The only party it is shared with is the AI assistant service (Anthropic's Claude) that reads and organises the mail on the firm's behalf, solely to provide these features; we never use it to develop, improve or train generalised artificial-intelligence or machine-learning models.
• Revoking access: access can be withdrawn at any time from your Google Account's third-party access settings, after which the tools can no longer read the mailbox.

Kilpatrick Strategic's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

We keep information only as long as it is needed for the purpose it was collected for. You may ask us at any time to delete information we hold about you, including any data obtained through Google APIs, and we will do so unless the law requires us to keep it.

Security

We protect the information we hold with reasonable technical and organisational measures, including keeping credentials out of shared systems and limiting access to the people who need it.

Changes

If this policy changes, the updated version will be posted on this page with a new date.

Contact

Questions or deletion requests: [email protected].