Privacy Policy

LAST UPDATED · SEPTEMBER 19, 2026

1. Scope

This policy applies to information collected through this website, including public contact forms, StrategyDesk requests, acquisition criteria submissions, content requests, cookie tools, and related website interactions. It does not cover any separate, password-protected client platform unless expressly stated.

2. Information we may collect

Information may include your name, business contact details, company, role, sector, meeting intent, acquisition criteria, message content, communication preferences, and source or campaign information. The website may also collect technical information such as browser type, device type, pages viewed, referring page, approximate location derived from an IP address, and cookie or consent choices.

Please do not submit financial statements, transaction documents, personal identification numbers, or other highly sensitive information through a public website form.

3. How information may be used

• To respond to inquiries and prepare for requested conversations.
• To route an inquiry to an appropriate Graystone team member.
• To administer the website, maintain security, and understand website performance.
• To provide requested resources or communications where consent or another lawful basis applies.
• To comply with legal obligations and protect the rights, safety, and integrity of Graystone, its clients, and website visitors.

4. Cookies and analytics

The website may use essential cookies and, where enabled with appropriate consent, analytics or preference technologies. The cookie notice provides controls for available categories. Browser settings may also be used to block or remove cookies, although some site functions may then work differently.

5. How information may be shared

Information may be shared with service providers that support hosting, analytics, security, communications, scheduling, and form processing; with professional advisors; with authorities where required by law; or as part of a corporate transaction. Providers should receive only the information needed to perform their function and should be subject to appropriate obligations.

6. Retention and security

Information should be retained only as long as reasonably necessary for the purpose collected, applicable legal requirements, dispute resolution, and legitimate recordkeeping. Graystone should use administrative, technical, and organizational safeguards appropriate to the nature of the information. No public website or transmission method can be guaranteed completely secure.

7. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about certain disclosures. You may also withdraw consent where processing relies on consent. Requests should be verified and handled through the official privacy contact listed below.

8. Third-party links and children

This website may link to third-party services with their own privacy practices. The site is intended for business audiences and is not directed to children. Graystone does not knowingly seek personal information from children through this website.

9. Updates and contact

This policy may be updated as the website, business, or legal requirements change. The effective date will be updated when material changes are published.