Privacy notice

Grey Rhino Crash Ltd and GraphKind

Last updated: 29 October 2026

1. Who we are

Grey Rhino Crash Ltd is the company behind GraphKind and is responsible for the personal information described in this notice.

Company number: 15501794

Registered address: 7 Bell Yard, London, England, WC2A 2JR

This notice covers greyrhinocrash.com, graphkind.com, the GraphKind launch waitlist and enquiries or partnership correspondence sent to us. It does not describe processing by any future GraphKind customer account or product service; additional information will be provided when those services become available.

2. Information we collect

When you contact us, we receive your email address and any name, organisation, contact details or other information you include in your message.

When you join the GraphKind waitlist, we receive the information you submit through the form, including the email address provided for launch updates.

Our websites and their service providers may process technical information needed to deliver and protect the websites, such as IP addresses, browser and device information, requested pages and security logs.

Please do not send sensitive personal information unless it is necessary for an enquiry and you have discussed this with us first.

3. Why we use information and our lawful bases

Enquiries and partnerships

We use correspondence to answer questions, discuss potential partnerships and maintain relevant records. Our lawful basis is our legitimate interests in communicating with people who contact us and developing our business. Where you ask us to take steps before entering into a contract with you personally, processing necessary for those steps may instead be based on that request.

GraphKind launch waitlist

We use waitlist details to send the launch information you agree to receive. Our lawful basis for these emails is consent. Joining the launch waitlist is not permission for unrelated marketing.

You can withdraw consent by contacting us at contact@greyrhinocrash.com or using an unsubscribe option provided in an email. Withdrawing consent does not affect processing that was lawful before withdrawal.

At launch, we will ask whether you wish to receive ongoing updates. We will not treat silence as agreement.

Website operation and security

We process technical information where necessary for our legitimate interests in operating, maintaining and protecting the websites and investigating misuse.

Legal obligations

We may process or retain information where necessary to meet applicable legal obligations.

4. Who receives information

We use service providers to support our activities:

  • Proton for email communications.

  • Amazon Web Services (AWS) for data storage.

  • Google Sheets for storing GraphKind waitlist email addresses.

  • Framer for website hosting and delivery.

Providers may process information according to their service arrangements and, where applicable, their own privacy notices. Access should be limited to what is needed for the relevant service.

We may also disclose information where required by law, to obtain professional advice or where necessary to establish, exercise or defend legal claims.

5. International processing

Our providers may process information outside the UK. The locations and applicable transfer arrangements depend on the services and settings used.

Where UK data protection law requires safeguards for an international transfer, the transfer must be covered by a recognised adequacy arrangement or another permitted mechanism, such as appropriate contractual safeguards. Contact us for information about the arrangements applicable to your information.

6. How long we keep information

We keep routine enquiry and partnership correspondence for up to one year after the last substantive contact, unless an ongoing relationship, legal obligation or legal claim requires longer retention.

We keep launch waitlist details until the GraphKind launch. At launch, we will ask for permission to send ongoing updates. If you do not agree, we will remove your details from the active marketing list once the launch communications and permission request are complete. If you agree, we will explain the arrangements for ongoing updates.

If you withdraw consent earlier, we will remove you from the active mailing list. We may retain a minimal record of your opt-out where necessary to ensure that you are not contacted again.

Technical logs are retained only for as long as needed for operational and security purposes. Contact us for the retention settings applicable to these services.

7. Cookies

We do not currently use cookies on our websites. We do not use Google Analytics. Google Sheets is used to store waitlist email addresses, not to track website visitors. If our use of cookies changes, we will update this notice and obtain consent where required.

8. Your rights

Depending on the circumstances and lawful basis, you may have rights to:

  • Request access to your personal information.

  • Ask for inaccurate information to be corrected.

  • Ask for information to be erased.

  • Ask for processing to be restricted.

  • Object to processing based on legitimate interests.

  • Receive certain information in a portable format.

  • Withdraw consent where processing relies on consent.

You have an absolute right to object to the use of your information for direct marketing.

Contact contact@greyrhinocrash.com to make a request. We may need proportionate information to verify your identity. We normally respond within one month, subject to lawful extensions and exceptions.

9. Complaints

Please contact us if you have concerns about how your information is handled.

You may also complain to the Information Commissioner’s Office, the UK data protection regulator:

10. Other websites

Our websites may link to third-party websites. Those organisations are responsible for their own privacy practices. Both Grey Rhino Crash and GraphKind are covered by this notice for the activities described above.

11. Changes to this notice

We may update this notice as our activities change. The published version will show its last-updated date. Where required, we will bring significant changes to your attention or ask for fresh consent.