Privacy Policy
Last updated: 21 June 2026
1. Who we are
Sightline is a product operated by Granite Marketing (a UK unincorporated business trading as Granite Marketing). For the purposes of UK GDPR, Granite Marketing is the data controller for personal data collected through sightlineintel.io and the Sightline service.
- Operator: Granite Marketing
- Contact: stephen@granitemarketing.co.uk
- Jurisdiction: United Kingdom
2. What data we collect
2.1 Account and demo-booking data
When you book a 20-minute demo through our embedded Cal.com scheduling tool, Cal.com collects the information you provide (name, email address, optional meeting notes). When you become a customer, we store account information you provide during onboarding (workspace name, recipient email addresses, your business profile responses, and any documents you choose to upload).
2.2 Uploaded documents and workspace content
Sightline accepts optional uploads (business plan, sustainability report, competitor list) during onboarding. These documents are stored encrypted in transit and at rest, on EU-hosted infrastructure. You own this data. You can export or delete it at any time. We do not use it to train shared models.
2.3 Behavioural and analytics data
We use PostHog and Vercel Analytics to collect product analytics (pages visited, time on site, referral source, browser type, device type, approximate geographic location). This data is used to improve the website and product experience. PostHog is self-hosted by us in the EU and reverse-proxied through /ingest/* on our domain.
3. How we use your data
- Schedule and deliver demos you have booked.
- Provide the Sightline service — generate briefs, mention alerts, summaries, and reports based on your workspace configuration.
- Send service emails (digests, billing notifications, account changes).
- Improve product experience by analysing aggregated usage.
- Comply with legal obligations (invoicing, tax, statutory record-keeping).
4. Legal basis for processing
- Contractual necessity: processing required to deliver the Sightline service you subscribe to.
- Consent: when you book a demo or upload documents during onboarding, you consent to us processing the data for those purposes. You may withdraw consent by emailing us.
- Legitimate interest: we use anonymised product analytics to understand and improve how the service is used. This processing is proportionate and does not override your rights.
- Legal obligation: invoice and payment records are retained to comply with UK tax and accounting law.
5. Third-party processors
We share personal data only with trusted third-party service providers who process data on our behalf under appropriate contractual safeguards.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Vercel | Website hosting and performance analytics | Anonymised page-load metrics | USA (adequate safeguards in place) |
| PostHog | Product analytics | Pseudonymised event data | EU |
| Cal.com | Demo scheduling | Name, email, booking details | USA (adequate safeguards in place) |
| Stripe | Subscription billing (when applicable) | Name, email, billing details | USA / Ireland (adequate safeguards in place) |
Where data is transferred outside the UK or EEA, we rely on UK adequacy decisions and standard contractual clauses as appropriate.
6. Data retention
- Workspace content (documents, briefs, reactions): retained for the duration of your subscription. If you cancel, your workspace stays read-only for 30 days, then is permanently deleted.
- Demo-booking data: retained by Cal.com in accordance with their own retention policy.
- Analytics data: retained by PostHog and Vercel Analytics according to their respective retention periods.
- Invoicing and payment records: retained for 6 years to comply with UK tax obligations.
7. Your rights under UK GDPR
You have the following rights in relation to your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data.
- Right to restriction of processing — request that we limit how we use your data.
- Right to data portability — request a copy of your data in a machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email stephen@granitemarketing.co.uk. We aim to respond within one month.
8. Cookies
Our website uses analytics cookies. For details on the cookies we set, how to manage them, and how to opt out, see our Cookie Policy.
9. Right to complain
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk
- Telephone: 0303 123 1113
We would appreciate the chance to address your concerns first — please email us before contacting the ICO.
10. Changes to this policy
We may update this privacy policy as our practices and the service evolve. Any changes will be posted on this page with an updated “Last updated” date.