Privacy policy

1. Who we are

PulseDAQ is run by Little Warden Ltd, registered in England and Wales (company number 10836948), 35 Orchard Road, Leeds, LS15 7LP, United Kingdom. We're the controller of the personal information described here, which means we decide how it's used and we're responsible for looking after it.

For anything about your information, send us a message through the contact form or write to us at that address.

2. What we collect

When you create a report or account

• Your email address and name, and a password if you set one. Passwords are stored in scrambled form (hashed), so nobody here can read them.
• Your brand's website, its sector and region, the competitors you choose and your report settings, including the weather region and time zone.
• When you agreed to our terms, verified your email and last logged in.

When you share a report

• The email addresses of colleagues or clients you add to a report or invite, and when we sent them a report. We use these only to send them what you asked us to.

When you pay

• Your billing name, email, address, postcode, country, VAT number and currency, your plan and what you've paid.
• Card and PayPal details go straight to Braintree. We only see things like the card type, its last four digits and when it expires. At checkout, Braintree also collects information about your device to check for fraud.

When you contact us

• Your name, email, company and message, plus the IP address and browser you sent it from, which help us block spam.

When you use the site

• While you're logged in, the IP address and browser of each session, so we can keep your account secure.
• Our servers keep short-term technical logs of requests, including IP addresses, to fix problems and stop abuse.

3. The emails in reports

Reports are built from marketing emails that brands send to email addresses we own, after we sign up to their newsletters. They're about what brands are promoting, not about you. Occasionally a brand's email includes a person's name, such as a founder signing off, and that appears in reports as the brand sent it.

4. Why we use it

Data protection law asks us to give a lawful reason for each use of your information. Ours are:

To provide PulseDAQ

Running your account and reports, sending reports to you and the people you've added, taking payment and giving you support. We need the information to do what you've signed up for (contract).

To keep records the law requires

Invoices, payments and VAT records (legal obligation).

To keep PulseDAQ secure and working

Preventing fraud and spam, protecting accounts, and fixing and improving the service (our legitimate interests).

To tell you about your report

Emails about your reports and account, including the daily emails in your first week, which you can stop with the link in each one (our legitimate interests).

To send reports to people you add

When you add a colleague or client, we email them on your behalf (your legitimate interests and ours).

We don't sell personal information, and we don't use it for advertising.

5. Automated analysis and AI

We use AI models to read your website and the emails brands send, for example to work out your sector, suggest competitors, and pick out products, offers and deadlines. Most of this runs on computers we own and control. Some of it uses AI services run by other providers. We only send those services websites and brands' emails, not your account or billing details, and we use them on terms that don't let them train their models on what we send.

None of this makes decisions about you as a person. It decides what goes into a report.

6. Who we share it with

These companies process information for us, only on our instructions and under contracts that require them to protect it:

We may also share information with our professional advisers, with the police, courts or regulators when the law requires it, or with a buyer if our business is sold, who would have to look after it in the same way.

7. Where it's kept

Our servers and backups are in data centres in the European Union. Some of the companies above are based in, or use, other countries, mainly the USA. Where information leaves the UK, it's protected in one of the ways UK law allows: the country has been approved by the UK government, the company is certified under the UK extension to the EU–US Data Privacy Framework, or we've signed the UK's standard contract terms with it.

8. How long we keep it

Your account and reports

While your account is open. When you close it, we delete it 90 days later, so you can change your mind in the meantime.

Invoices and payment records

Six years from the end of the financial year they belong to, because tax law requires it.

People you added to a report

Until you remove them, or your account is deleted.

Contact-form messages

As long as we need them to deal with your message and anything that follows from it.

Login sessions

Until you log out.

Backups

Deleted information drops out of our backups as they're replaced in the normal cycle.

9. Your rights

You can ask us to:

• give you a copy of the personal information we hold about you
• correct anything that's wrong or out of date
• delete your information
• stop or limit how we use it, or object to a use based on our legitimate interests
• give you your information in a format you can take elsewhere.

Ask through the contact form. We may need to check it's really you. We'll reply within one month, and there's no charge. Some things we have to keep, such as invoices, even if you ask us to delete them, and we'll tell you if that applies.

If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Keeping it safe

Everything between your browser and PulseDAQ is encrypted, passwords are hashed, our machines talk to each other over a private encrypted network, and only the people who run PulseDAQ can get to the data. No system is perfectly secure. If something goes wrong that puts your information at risk, we'll tell you and the regulator as the law requires.

11. Cookies

We only use cookies that PulseDAQ needs to work, so we don't ask for consent. There are no analytics, advertising or tracking cookies.

Cloudflare may set a cookie to tell people from bots, and on the checkout page Braintree's payment form may set its own cookies to prevent fraud. Both are needed for security.

12. Changes to this policy

If we change how we use your information, we'll update this page and its date. If the change is significant, we'll email you before it applies.