Legal
Privacy notice
What we collect, why, and what you can ask us to do about it. Plain English, because that is how we teach.
Who we are
DataPulse AI Limited (company number 16397998) is the data controller for the personal data described in this notice. AIforCompanies is our trading name. We design, build and run AI solutions for businesses, and train teams to use AI on their own work.
You can reach us at [email protected].
What we collect, and when
We run no advertising trackers on this site and we do not sell or share anything for advertising.
- Enquiry form. If you send us an enquiry, we collect your name, company, email, what you tell us you are trying to do, plus the page you sent it from. It is stored in our HubSpot account and used to reply to you and to arrange a call if you want one.
- Joining the waitlist for an open session. If you join the waitlist, we collect your name, email address and, if you give them, your company, how many of you there are and a short note. We store the contact in HubSpot and send you one confirmation email through Resend, then email you when an open session is booked. Reply to any of those emails to come off the list.
- Downloading a resource. If you ask for one of our free documents, we collect your email address, first and last name, company name and company size. We also note which page you came from: the address you landed on, the site that sent you and any campaign tags in the link (utm tags and the click identifiers that advertising and social platforms add), so we can see which of our work brings people in. We email you a link to the document, never the file itself. The link is personal to you, and we record when you use it, so we know the document was opened. We store the record in HubSpot and in our own contact records, including a lead tracker we run ourselves. Before we send it you agree to us emailing you the document and a few related follow-ups. Follow-ups go only to business addresses, never to a personal email account. Every follow-up has a one-click unsubscribe, and unsubscribing stops them all.
- Booking a call. If you book a call, our scheduling provider collects your name, email, the time you chose and anything you add to the booking notes.
- Email. If you email us directly, we hold that correspondence.
- Attending a session. Before a team day we ask attendees a short set of questions about the work they do, so the session is built around it. We ask for no more than we need for that.
- Visiting a free document page. We count a visit to a page where a free document is offered, so we can see how many visitors go on to ask for it. The count carries no name, no email address and no cookie, and nothing is stored in your browser for it.
- Visiting the site. Our hosting and delivery providers see your IP address and the page you asked for when your browser connects, and keep ordinary server logs. If you accept analytics, Google Analytics records which pages you read, roughly where in the world you are, and what device and browser you used. We look at it in aggregate, to see which pages are worth writing more of. If you decline, none of it is collected and nothing on the site changes.
Cookies and similar storage
The full list of what the site stores, with names and lifetimes, is on our cookie policy at /cookies. We ask before we store anything that is not needed to run the site. The banner on your first visit has two buttons, Accept and Decline, both one click on the same screen, with nothing hidden behind a settings menu and nothing ticked for you in advance. Until you accept, no analytics script is loaded and nothing is requested from Google.
You can change your mind at any time with the Cookie choices link in the footer of every page. Withdrawing stops the collection straight away and deletes the Google Analytics cookies from your browser. It does not delete measurements already taken, which are aggregated and cannot be traced back to you.
- Analytics, only if you accept. Google Analytics 4 stores identifiers named _ga and _ga_* in your browser, for up to two years, so that several visits from you are counted as one reader rather than several. Legal basis: your consent.
- Your choice about this banner. Kept in your browser’s local storage under aifc-consent-v1, so we do not ask again on every page. Strictly necessary, and never sent to us.
- Your first visit, only if you accept analytics. The date and time of your first visit to a page of ours, kept in your browser’s local storage under aifc-first-visit-v1 for 30 days, then replaced. If you later ask for one of our documents, we send that time with your request so we can see how long you read before you got in touch. Without analytics consent it is held in the page’s memory only, for as long as the page is open, and sent only if you ask for a document. Legal basis: your consent.
- The address you asked a document to be sent to. Kept in your browser’s session storage under aifc-lead-email-v1, so the confirmation can show it and offer to send the email again. Strictly necessary for that, never sent to us except when you press the button, and gone when you close the tab.
- Light or dark. Your choice of theme is kept in your browser’s local storage under aifc-theme. Strictly necessary to honour a setting you picked, and never sent to us.
- The enquiry form. If you have a HubSpot tracking cookie from elsewhere, it is sent with your enquiry so HubSpot can link it to your visit. We do not load HubSpot’s tracking script, so this site does not create that cookie.
Why we use it, and our lawful basis
- To reply to you and arrange a session. Necessary to take steps at your request before entering a contract, or our legitimate interest in responding to a business enquiry.
- To deliver and improve a session you have booked. Performance of our contract with you.
- To see how the site is used. Your consent, given in the cookie banner and withdrawable at any time from the footer. We measure in aggregate, to know which pages are read and which are not, never to identify you.
- To send you a document you asked for, and follow-up emails. Your agreement, which you give on the form before we send anything. Follow-ups go only to business addresses and each one carries a one-click unsubscribe. Sending the document itself is at your request.
- To see which of our pages bring people in. Our legitimate interest in knowing which of our work is useful, using only the page you came from and the campaign tags in the link. Where we store a first-visit time or the first page of your visit in your browser, that rests on your consent.
- To keep records of what we agreed. Our legitimate interest in running the business, and our legal obligations.
Who we share it with
We use a small number of third parties to run the site. They process data on our instructions only, and we do not sell personal data to anyone.
- HubSpot. Stores enquiries and our contact records, in its EU data centre.
- Cal.com. Handles call scheduling.
- Resend. Sends the document you asked for, and its follow-up emails.
- Supabase. Hosts our own contact records, including what you asked for and which of our emails you received.
- Amazon Web Services. Hosts the site.
- Cloudflare. Sits in front of the site to deliver pages and protect it from attack, so it handles the IP address of every visitor.
- Google Analytics. Measures site traffic in aggregate, and only if you accepted. Google may process it outside the UK under its standard contractual clauses.
- Google Workspace. Handles our email.
- Our lead tracker. A system we run ourselves to follow a document request from first visit to follow-up. It holds the details you gave on the form and the page you came from.
Transfers outside the UK
Some of the providers above, including Google, process data outside the UK, for example in the United States. Where they do, we rely on the UK’s adequacy arrangements for that country or on the provider’s standard contractual clauses with the UK addendum, so your data keeps the protection UK law gives it. This is general information, not legal advice.
How long we keep it
Enquiries that do not lead to work are deleted within 24 months. Records relating to a session we delivered are kept for seven years, which is the period we need for tax and accounting. Session materials containing your work are deleted on request at any time.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable form. Where we rely on legitimate interests you can object at any time. Email us and we will respond within one month.
If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you came to us first so we can put it right.
Changes
We update this notice when what we do changes. It was last updated on 29 October 2026.
AIforCompanies is a trading name of DataPulse AI Limited, registered in England and Wales no. 16397998. Registered office: Seeds Hub, Empire Way, Wembley, England, HA9 0RJ. ICO registration no. ZC280411.