Privacy
Last updated 11 August 2026
This site sets no cookies, runs no analytics and loads nothing from anyone else. There is no tracking to opt out of and no consent banner, because there is nothing to consent to. The only personal data involved is what you send me directly.
Who is responsible
Canvas Rescue is a service of Cairn Automation. If you have a question about anything on this page, email hello@cairnautomation.co.uk and it comes to me personally.
What I collect, and only when you send it
- Your email and whatever you write in it — when you contact me about an assessment, a migration or aftercare.
- Your exported app — if we proceed to an assessment, the
.msappfile you send me. This contains your app's screens, formulas and structure. - Billing details — the name, address and reference needed to raise an invoice, if you become a client.
What I do with it
Your email is used to reply to you. Your exported app is used to run the conversion assessment and to produce your report. Billing details are used to invoice you and to keep the accounting records I am legally required to keep.
The converter reads your app's formulas and structure, not the records inside it. The generated app runs on seeded sample data until it is connected to your own environment, which happens in your tenant, not mine.
What I will never do with it
- Sell it, rent it, or share it with anyone for marketing.
- Add you to a mailing list because you emailed me a question.
- Use your app, your name or your logo as a public example without asking you first and getting a yes in writing.
- Use your app or its contents to train any machine-learning model.
Lawful basis
Replying to your enquiry and carrying out work you have asked for is performance of a contract, or steps taken at your request before entering one. Keeping accounting records is a legal obligation. I do not rely on legitimate interests for marketing, because I do not market to you off the back of an enquiry.
How long I keep things
- Enquiries that go nowhere — deleted within 12 months.
- Your exported app and generated output — deleted within 90 days of the work finishing, or sooner if you ask. Say the word at any point and it goes.
- Invoices and accounting records — kept for six years, because HMRC requires it.
Who else is involved
Email is hosted on Microsoft 365. This website is hosted on Cloudflare Pages, which processes the technical request data any web server sees — your IP address and browser — for security and to serve the page. Neither is used to build a profile of you, and I run no analytics on top of them.
Your rights
You can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, or object to how I am using it. Email me and I will act on it within one month — in practice, within a few days. There is no form and no charge.
If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. I would rather you told me first so I can put it right.
Changes
If this notice changes materially, the date at the top changes with it. I will not quietly broaden what I do with your data after the fact.