Privacy Policy

Scope and responsibility

This Privacy Policy explains how Granthill Network handles personal information in connection with business inquiries, consulting relationships, and use of our website. Our services concern IT transitions, readiness reviews, software adoption, handover documentation, and post-implementation workflows. This policy covers information relating to identifiable people, including business contacts and client personnel.

Different practices can apply when we handle information under a client’s documented instructions for a specific project. In that situation, the applicable service agreement and the client’s own privacy obligations also matter. This policy does not describe the independent practices of software vendors or other organizations.

Information you choose to provide

You may provide your name, business email address, organization, selected service, and a description of your requirements when discussing an engagement. Correspondence may also include a job title, contact number, scheduling preferences, and information needed to understand the proposed scope. Please keep an initial description relevant to the work you want to discuss.

When an engagement is agreed, business records may include authorized contacts, proposals, contracts, invoices, delivery records, and project-related correspondence. We ask for information appropriate to the particular relationship rather than requiring every visitor to provide all of these details.

Consulting materials and workforce information

Readiness reviews, user orientation work, and workflow assessments can involve role descriptions, process notes, software screenshots, interview responses, and feedback about difficulties using tools. Such materials may identify employees or other individuals if a client includes those details. Names and personal details should be omitted where they are unnecessary to the assessment.

A client supplying personal information must have authority to do so and should explain relevant restrictions before sharing it. We use client-provided project information for the agreed work and related coordination. Any additional handling requirements, access restrictions, or return arrangements should be recorded in the project agreement.

Information to avoid sharing

Our general contact fields are intended for business requirements. Do not include account passwords, access tokens, full payment card details, government identification numbers, medical information, or other sensitive personal information in an initial inquiry. A description of the technology issue will usually be sufficient.

If an engagement genuinely requires restricted information, discuss an appropriate method and the necessary permissions first. Sharing information voluntarily does not mean that it is necessary for our services, and we may request a redacted or less detailed version.

Technical website information

When a browser requests a website page or asset, hosting and delivery systems may process technical information such as the network address, browser characteristics, requested resource, and request time. Such processing can support page delivery, security, troubleshooting, and operational integrity. The information involved depends on the active hosting configuration.

Where this site is hosted on Shopify, Shopify may process information to provide its platform and enabled features. Platform services and installed applications can have their own privacy responsibilities. Granthill Network’s website pages do not add advertising pixels or optional visitor analytics.

The Syne and Manrope typefaces used on these pages load through Google Fonts. Your browser requests the stylesheet and font files from Google domains, which involves technical request information such as your IP address and browser request headers. Google handles those requests under its own policies. The font integration is used to display the page typefaces, not to add an advertising or analytics feature.

Browser storage and preferences

Our website uses browser storage to remember the necessary cookie-notice preference. That preference is separate from consulting project records. The preference record does not include your name, email address, organization, selected service, or message, and our contact fields are not saved in browser local storage by these site features.

Shopify technical cookies may also operate according to the theme and features enabled on the hosted site. The Cookie Policy explains browser storage, necessary functionality, platform differences, and how to remove locally stored preferences. Browser autofill and history are controlled separately by your browser.

Why we use information

We use information we receive to understand requirements, determine an appropriate service scope, communicate about work, coordinate with authorized stakeholders, prepare agreed deliverables, document decisions, manage invoices, and address project concerns. We may also use relevant records to meet legal obligations and protect legitimate business interests.

Personal information is not required for every aspect of a transition review. Where practical, findings can be prepared around teams, responsibilities, and workflow issues rather than individual names. We do not use project materials to build advertising audiences or publish identifiable client information without appropriate permission.

Applicable grounds for processing

Where a law requires an identified legal basis, processing may be necessary to take requested steps before a contract, perform a contract with you, meet a legal obligation, or pursue a legitimate interest such as responding to an inquiry or protecting service records. We evaluate the relevant purpose and the rights of affected individuals.

Where consent is required for a particular optional activity, that activity requires appropriate consent. Withdrawing consent does not invalidate processing that lawfully occurred before withdrawal. A request to discuss services is not permission to carry out unrelated marketing or unrestricted use of personal information.

When information may be disclosed

Information may be shared with authorized members of a client’s project team where necessary to perform the agreed work, and with service providers used for business administration or delivery where they need the relevant information. Depending on the engagement, those functions may include communications, hosting, document handling, or invoicing.

We may disclose information when legally required, to respond to a valid legal process, to protect rights or safety, or in connection with a lawful business transfer subject to appropriate safeguards. Disclosures should be limited to their purpose. We do not sell contact or project information or use it for cross-context behavioral advertising.

Security and access

Appropriate safeguards depend on the information, the service, and the systems involved. We aim to limit access to relevant personnel, avoid unnecessary collection, use suitable access controls, and handle project materials with reasonable care. Client-specific security requirements should be agreed before restricted information is provided.

No website, communication channel, or storage system can be guaranteed completely secure. If you identify a potential exposure involving our work, contact us without sending the affected password or credential. Legal incident-notification obligations, where applicable, are addressed according to the circumstances and applicable law.

How long records are kept

We retain business information only for as long as reasonably needed for its purpose, including ongoing communications, agreed project work, accounting obligations, dispute resolution, and applicable legal requirements. The necessary period depends on the record and the engagement; a single fixed period would not accurately describe every category.

Relevant information may need to be retained while an obligation or dispute remains outstanding. Client-specific return or deletion instructions can be agreed for project materials, subject to lawful retention duties. The browser preference record is governed separately by browser storage behavior and can be removed through browser settings.

Your choices and privacy requests

You can ask us to correct inaccurate contact information, explain the information we hold about you, or assess a deletion request. Depending on the applicable law, you may also have rights to access, obtain a copy, restrict processing, object to processing, or withdraw consent. Some rights have exceptions and do not apply in every situation.

Use the contact details at the end of this policy and explain your request. We may ask for proportionate information to verify identity or authority before releasing records. We will address applicable requests within legally required periods and explain any lawful reason a request cannot be fully completed. Where available under applicable law, you may seek review of a decision or contact the relevant authority.

Requests involving a client organization

If your information was supplied by your employer or another client for a consulting project, that organization may be the appropriate first contact for the request. We may need to coordinate with it before changing project records or disclosing information belonging to the organization or another person.

Verification should not require unnecessary sensitive documents. We will consider the relationship, the information requested, and any confidentiality obligations when determining a proportionate response. Privacy requests are not used as a reason to impose unrelated marketing choices.

Location and children

Granthill Network is based at the address below. Hosting, communication, or other business services may process information in a location different from your own. Where cross-border transfer rules apply, the relevant processing arrangements must account for those requirements; visiting the site alone does not establish a transfer exemption.

Our consulting services and website are directed to business audiences, not children. We do not knowingly seek personal information from children under 13. If you believe a child has provided information to us, contact us so that the circumstances can be reviewed and appropriate action taken.

Changes to this policy

We may revise this policy to reflect changes in services, website features, or legal requirements. The last-updated date identifies the current version. Material changes will be accompanied by additional notice or consent where required. A new use of information must have an appropriate basis; a policy update alone does not authorize unrestricted use.

The Terms of Service address consulting engagements, while the Cookie Policy addresses browser technologies. If you have questions about how these documents apply to a specific project, contact us before sharing information that requires special handling.