Privacy Policy

Last updated: April 2026

1. Who we are

Toro Solutions is a trading name operated by Chris Paton. We provide digital analytics, AI-powered briefing services, and web development for leisure property and travel operators. Our registered contact address is London, UK. For any privacy enquiries, use our contact form.

2. What data we collect

  • Contact form submissions — your name, email address, company name, and message when you use our contact form.
  • Sector report requests — your email address when you request our free sector benchmark report.
  • InsightOS clients — read-only access to your Google Analytics 4 property and Google Search Console account, granted via OAuth. We store only aggregated metrics — never raw session or user data.
  • Website analytics — we may use privacy-respecting analytics to understand how visitors use this site.

3. How we use your data

  • To respond to your enquiries and deliver services you have requested.
  • To send the sector benchmark report you requested (one-time delivery; no ongoing list unless you opt in).
  • To produce your weekly InsightOS briefings and benchmark comparisons.
  • We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data retention

Contact enquiries are retained for up to 2 years. InsightOS client data is retained for the duration of your subscription plus 90 days, after which it is deleted. You can request deletion at any time.

5. Your rights (UK GDPR)

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Object to processing or request restriction.
  • Data portability — receive your data in a structured format.

To exercise any of these rights, use our contact form. We will respond within 30 days.

6. Cookies

This site uses a session cookie for dashboard access authentication. No advertising or tracking cookies are used. If we add analytics in future, we will update this policy and provide a consent mechanism.

7. Third-party processors

We use Vercel for hosting (data processed in the EU/UK region), Google APIs for InsightOS data connections (subject to Google's own privacy policy), and SendGrid for transactional email delivery.

8. Changes to this policy

We may update this policy as our services evolve. Material changes will be notified to active InsightOS clients by email. The latest version is always at this URL.