Privacy Policy

1. Introduction

Cairnyard (“we,” “us,” or “our”) operates cairnyard.com (the “Site”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have about your information. We are headquartered in Indianapolis, Indiana, USA.

By using the Site or submitting your information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Site.

If you have questions or concerns, contact us at ariel@cairnyard.com.

2. Information We Collect

Information You Provide Directly

• Email address — when you submit a form on the Site to receive a visibility report, assessment, or other deliverable
• Name and phone number — if you book a call via our scheduling tool or contact us directly
• Business information — such as your business name or website, if submitted as part of a form or inquiry
• Payment information — if and when paid subscriptions are offered, we will collect billing details (such as name and payment card information) through our payment processor. We do not store full card numbers on our servers.

Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect:

• Usage data — pages visited, time on page, links clicked, referring URL, and other interactions with the Site
• Device and browser information — browser type, operating system, screen resolution, and device type
• IP address — which may be used to infer approximate geographic location (city or region level)
• Cookies and similar tracking technologies — see Section 7 for details

Information from Third Parties

We may receive information about you from third-party data providers (such as Apollo.io) as part of our outreach and sales process. This may include publicly available contact information such as your name, business email address, job title, company name, and LinkedIn profile URL. We use this information solely to contact you about our Services.

3. How We Use Your Information

We use the information we collect to:

• Deliver requested Services — provide you with visibility reports, assessments, and other outputs you requested
• Send follow-up communications — email you about the Services you requested, share relevant insights, and follow up on your report or assessment
• Send marketing and outreach emails — contact businesses that may benefit from our Services, including through email campaigns. You may opt out at any time (see Section 8)
• Schedule calls — if you book a call, we use your contact information to confirm and manage your appointment
• Process payments — if you subscribe to a paid plan, we use your billing information to process transactions
• Analyze and improve the Site — understand how visitors interact with the Site so we can improve its design, performance, and content
• Prevent fraud and ensure security — monitor for suspicious activity and protect the integrity of the Site
• Comply with legal obligations — fulfill applicable legal, regulatory, or contractual requirements
• Automated processing — we use automated tools to match your business information against third-party data sources (such as Apollo.io) to identify contact information and enrich outreach lists. This automated processing is used solely for outreach purposes and does not produce legally significant decisions about you.

4. How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for their own independent marketing purposes. We may share your information in the following limited circumstances:

Service Providers

We share information with third-party service providers who assist us in operating the Site and delivering our Services. These providers act on our behalf and are contractually prohibited from using your information for any purpose other than providing services to us. Categories of service providers include:

• Email delivery — to send reports, assessments, and email campaigns (Instantly)
• Analytics — to analyze Site traffic and usage (Vercel Analytics, Google Analytics via Google Tag Manager)
• Appointment scheduling — to facilitate call bookings (Calendly)
• Data enrichment — to identify contact information for outreach (Apollo.io)
• SERP and local search data — to generate rankings and visibility reports (DataForSEO)
• Infrastructure and storage — to host the Site and store data (Vercel, Upstash Redis/Vercel KV)

Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or enforceable government or regulatory request — for example, in response to a subpoena, court order, or law enforcement inquiry.

Business Transfers

In connection with a merger, acquisition, sale of substantially all assets, or other business transaction, your information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on the Site before such a transfer occurs.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Data Storage and Retention

Your data is stored on servers located in the United States. We use Vercel (with infrastructure in the US East region) and Upstash Redis (Vercel KV) to store Site data, including email captures and page view analytics.

We retain your personal information for as long as necessary to:

• Provide our Services and fulfill the purposes described in this Policy
• Comply with applicable legal obligations (such as tax or accounting records)
• Resolve disputes and enforce our agreements

When your information is no longer needed for these purposes, we will delete or anonymize it. Email addresses submitted through our forms are retained until you request deletion or unsubscribe. If you unsubscribe from marketing emails, we may retain your email on a suppression list to ensure you are not re-added to future campaigns.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include HTTPS encryption for data in transit, access controls on our databases, and use of reputable cloud infrastructure providers.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at ariel@cairnyard.com.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (such as web beacons and tracking pixels) to collect usage data and improve the Site. A cookie is a small data file stored on your device by your browser.

Types of Cookies We Use

• Essential cookies — strictly necessary for the Site to function (e.g., session management, security). These cannot be disabled without affecting Site functionality.
• Analytics cookies — help us understand how visitors interact with the Site, including which pages are visited most frequently and how users navigate. We use Vercel Analytics and Google Analytics (loaded via Google Tag Manager) for this purpose. Google Analytics may set cookies such as _ga and _gid to track sessions and user behavior.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block, delete, or receive notifications about cookies. Note that disabling certain cookies may affect the functionality of the Site. For more information on managing cookies, visit allaboutcookies.org.

To opt out of Google Analytics tracking specifically, you can use the Google Analytics opt-out browser add-on.

Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser transmits a GPC signal indicating that you do not want your data sold or shared for cross-context behavioral advertising, we will treat this as a valid opt-out request under applicable law.

8. Email Communications and CAN-SPAM Compliance

We send emails in connection with our Services, including:

• Transactional emails — delivering reports, assessments, or responding to inquiries you initiated
• Marketing and follow-up emails — outreach campaigns, check-ins, and product announcements

In compliance with the CAN-SPAM Act:

• All commercial emails clearly identify Cairnyard as the sender
• All marketing emails include a clear, functional, one-click unsubscribe link
• Unsubscribe requests are processed within 10 business days
• We do not use deceptive subject lines or misleading header information
• Our physical mailing address is: Cairnyard, Indianapolis, IN

How to opt out: Click the “Unsubscribe” link at the bottom of any marketing email, or email us directly at ariel@cairnyard.com with “Unsubscribe” in the subject line. After opting out, you may still receive transactional emails related to services you have actively requested.

9. Your Rights

Depending on where you live, you may have rights regarding your personal information. We honor the following rights for all users:

• Right to Access. Request a copy of the personal information we hold about you.
• Right to Correction. Request that we correct inaccurate or incomplete personal information.
• Right to Deletion. Request that we delete your personal information, subject to certain exceptions (such as legal obligations or fraud prevention).
• Right to Opt-Out of Marketing. Opt out of receiving marketing emails at any time (see Section 8).
• Right to Data Portability. Request a copy of your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact us at ariel@cairnyard.com. We will respond within 30 days (or the timeframe required by applicable law). We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), effective January 1, 2026.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers — email address, name, IP address
• Commercial information — if you purchase a subscription, records of products or services purchased
• Internet or other electronic network activity — browsing and interaction data on the Site
• Geolocation data — approximate location inferred from IP address (city/region level)
• Professional or employment-related information — job title, company name, and business contact details (if obtained via third-party enrichment providers)

We do not knowingly collect sensitive personal information as defined by the CPRA (such as Social Security numbers, financial account credentials, precise geolocation, health data, or biometric data) in the ordinary course of our business.

Your CCPA/CPRA Rights

• Right to Know. Request disclosure of the categories and specific pieces of personal information we have collected about you and the purposes for collection.
• Right to Delete. Request deletion of your personal information, subject to certain exceptions.
• Right to Correct. Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing. We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive PI. We do not use or disclose sensitive personal information for purposes beyond what is necessary to provide our Services.
• Right to Non-Discrimination. We will not deny you services, charge you different prices, or provide a different level of service because you exercised your CCPA rights.

Do Not Sell or Share My Personal Information

We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. To submit an opt-out request or exercise any CCPA right, contact us at ariel@cairnyard.com. We will respond within 45 days as required by law.

Service Providers Under CCPA

We disclose personal information to third-party service providers solely for legitimate business purposes. These providers are contractually restricted from using your information for their own purposes. They are service providers — not third parties who can use data independently — under the meaning of the CCPA.

11. Automated Decision-Making

We use automated processing to match business information against third-party data sources (such as Apollo.io) to identify contact information and enrich outreach lists. This processing is used to determine who may receive outreach emails from us.

This automated processing does not produce legal decisions about you or decisions that significantly affect you in a legal or similarly significant way. It is used only to identify potential customers who may benefit from our Services.

If you have been contacted by us and wish to opt out of further contact or request that your data not be processed in this way, please contact ariel@cairnyard.com.

12. Children's Privacy

Our Site and Services are intended for business owners and professionals aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected information from a minor under 18, we will promptly delete it.

If you believe we have collected information from a minor, please contact us at ariel@cairnyard.com.

13. Third-Party Links

The Site may contain links to third-party websites or services (such as Calendly for scheduling). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party site you visit before providing them with your personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. For material changes, we will make reasonable efforts to notify you — for example, by sending an email to the address you provided or by posting a prominent notice on the Site.

Your continued use of the Site after any changes to this Policy constitutes acceptance of the updated Policy. If you do not agree with the changes, you must stop using the Site and may request deletion of your data as described in Section 9.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:

We will respond to all privacy requests within 30 days (or sooner as required by applicable law).