Privacy Policy
Last updated: 7 August 2026
Cornerstone AI Group Ltd ("Cornerstone," "we," "us") operates cornerstoneaigroup.com and provides listing-photo upgrade services to independent used car dealerships. This policy explains what personal data we collect, why, and what rights you have over it. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
01.Who This Applies To
This policy covers: (a) visitors to this website, (b) dealership contacts who submit the intake form or email us, and (c) recipients of our cold outreach emails and direct messages. It applies regardless of whether you are contacting us from the UK or the US.
02.What We Collect
| Source | Data | Why |
|---|---|---|
| Intake form | Name, dealership name, email address, website/listing link, approximate stock size | To build and deliver your free sample and follow up |
| Direct email / DM | Name, email or social handle, business name, message content, any listing links you share | To respond and deliver requested work |
| Cold outreach lists | Business name, publicly listed contact email, publicly listed stock photos | To send relevant introductory outreach (see Section 5) |
| Website analytics | Page visits, general location (country/region), device type, referring page | To understand traffic and improve the site |
| Form-enrichment tool (Apollo) | Company and role information inferred from your email domain when you fill in a form | To pre-fill and route enquiries correctly |
We do not collect payment card details directly — payments are handled by Stripe, which has its own privacy policy.
03.Cookies & Third-Party Tools
This site loads a small number of third-party scripts required for it to function or to support the enquiries process:
- Apollo.io — website visitor tracking and form enrichment, used to identify likely business visitors and route enquiries.
- Google Fonts — loads typefaces from Google's servers.
- Cloudflare CDN (Tailwind, Font Awesome) — loads styling and icon libraries.
These providers may set cookies or receive your IP address as a technical consequence of loading their scripts. We do not use advertising or cross-site tracking cookies. A cookie banner on the homepage lets you accept these or continue with necessary-only browsing — Apollo's scripts do not load until you make a choice. Your choice is remembered in your browser (via local storage) so you're not asked again on future visits; clearing your browser data will reset it.
04.How We Use Your Data
- To produce and deliver the free sample or paid image pack you requested
- To respond to enquiries and manage the working relationship if you become a client
- To send relevant cold outreach to independent car dealerships (see Section 5 for your rights here)
- To keep basic financial records where a payment has been made, as required by law
05.Cold Outreach — Your Right to Opt Out
UK recipients: our outreach to corporate bodies relies on the "soft opt-in" and legitimate interest provisions of PECR and UK GDPR. Every email includes a clear opt-out.
US recipients: our outreach complies with the CAN-SPAM Act — accurate sender identification, a truthful subject line, our postal address, and a working opt-out mechanism honoured within 10 business days.
Replying "STOP" to any email, or emailing hello@cornerstoneaigroup.com, removes you from future outreach. We do not sell or transfer contact lists to third parties.
06.Legal Basis for Processing (UK GDPR)
- Contract — processing needed to deliver a sample or paid service you've requested
- Legitimate interests — running relevant B2B outreach to dealerships, and basic website analytics
- Legal obligation — keeping financial records for tax purposes
07.How Long We Keep It
Enquiry and sample-request data is kept for up to 24 months from your last contact with us, or for the lifetime of a client relationship plus 6 years for financial records (a UK statutory requirement). You can request earlier deletion at any time — see Section 9.
08.International Transfers
We work with dealerships in both the UK and the US. Where your data is processed by a US-based tool we use (such as a cloud hosting or payment provider), that provider is required to maintain data protection standards materially equivalent to UK GDPR under their own contractual and legal obligations.
09.Your Rights
Under UK GDPR you can ask us to: access the data we hold on you, correct it, delete it, restrict how we use it, or provide it to you in a portable format. To exercise any of these, email hello@cornerstoneaigroup.com. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).
10.Data Security
We restrict access to personal data to the people who need it to deliver the service, use reputable third-party providers for hosting, payments and communication, and do not store payment card data ourselves.
11.Children
This site and our services are directed at businesses, not consumers, and are not intended for anyone under 18.
12.Changes to This Policy
We'll update the "last updated" date at the top of this page if this policy changes materially.
13.Contact
Cornerstone AI Group Ltd
Email: hello@cornerstoneaigroup.com