Privacy Policy

Effective date: 8 July 2026

1. Introduction and company information

This Privacy Policy explains how InsightPulse Analytics Ltd collects, uses, stores, shares, and protects personal data in connection with its marketing-analytics services, website, communications, and related business activities.

InsightPulse Analytics Ltd is the data controller for the personal data described in this Privacy Policy, unless we state otherwise.

Company details:
InsightPulse Analytics Ltd
24 St John's Street, London EC1M 4AY, United Kingdom
Email: [email protected]
Phone: +44 20 7946 5831

We are committed to processing personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and other applicable UK privacy laws.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identity data: name, job title, employer, and similar identifiers.
• Contact data: email address, telephone number, postal address, and business contact details.
• Account and communication data: correspondence, enquiry details, meeting notes, and service communications.
• Technical data: IP address, browser type, device identifiers, operating system, language settings, and log data.
• Usage data: pages visited, time spent on pages, clicks, referral sources, and interactions with our website or communications.
• Marketing and preference data: marketing preferences, consent records, campaign interactions, and opt-out choices.
• Analytics data: aggregated or pseudonymised data derived from website, campaign, or platform activity.
• Client and business data: information provided by clients or prospects for the delivery of marketing-analytics services.

We may collect personal data directly from you, from your employer or organisation, from our website and digital tools, from our clients, from third-party service providers, and from publicly available sources where lawful and appropriate.

Where we provide marketing-analytics services, we may process personal data on behalf of our clients as a processor. In such cases, our client determines the purposes and means of processing, and their privacy notice will apply in addition to this Policy.

3. Purpose of data processing

We process personal data for the following purposes:

• to provide and manage our marketing-analytics services;
• to respond to enquiries, requests, and communications;
• to manage client and supplier relationships;
• to operate, maintain, and improve our website, systems, and services;
• to analyse website performance, user engagement, and campaign effectiveness;
• to personalise content and improve user experience;
• to send service-related notices and administrative communications;
• to carry out business administration, accounting, and record-keeping;
• to detect, investigate, and prevent fraud, misuse, or security incidents;
• to comply with legal and regulatory obligations;
• to establish, exercise, or defend legal claims;
• to send marketing communications where permitted by law and, where required, with consent.

4. Legal basis for processing

We only process personal data where we have a lawful basis under the UK GDPR. Depending on the context, our legal bases include:

• Consent: where you have given clear consent, for example for certain marketing communications or optional cookies.
• Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
• Legal obligation: where processing is necessary to comply with applicable law.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service improvement, analytics, fraud prevention, network and information security, and direct business-to-business communications where permitted.
• Vital interests: in rare cases where processing is necessary to protect someone’s life.
• Public task: where applicable, if processing is necessary for the performance of a task carried out in the public interest.

Where we process special category data, we will do so only where a condition under UK GDPR applies, such as your explicit consent or another lawful condition permitted by law.

5. Data sharing and third parties

We may share personal data with the following categories of recipients where necessary and lawful:

• Service providers: hosting providers, cloud infrastructure providers, analytics tools, CRM providers, email delivery services, IT support, and security providers.
• Professional advisers: lawyers, accountants, auditors, insurers, and consultants.
• Clients and business partners: where we act as a processor or where sharing is required to deliver services.
• Regulators, authorities, and law enforcement: where required by law or to protect our rights, users, or the public.
• Corporate transactions: in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to appropriate safeguards.

We require third parties that process personal data on our behalf to implement appropriate technical and organisational measures and to process data only in accordance with our instructions and applicable law.

6. Data transfer to third countries

Some of our service providers or recipients may be located outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK.

Where we transfer personal data internationally, we will ensure appropriate safeguards are in place, such as:

• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses, where applicable;
• an adequacy regulation or decision recognised under UK law;
• other lawful transfer mechanisms permitted under the UK GDPR.

Where required, we will also carry out transfer risk assessments and implement supplementary measures to protect your personal data.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, and operational requirements.

Retention periods may vary depending on the type of data and the purpose of processing. In general:

• enquiry and correspondence data may be retained for up to 24 months after the last contact, unless a longer period is required;
• client and contractual records may be retained for the duration of the relationship and for a further period required by law or for claims management;
• marketing preference and consent records may be retained while relevant and for a reasonable period thereafter to demonstrate compliance;
• technical logs and analytics data may be retained for a limited period necessary for security, performance, and reporting purposes;
• financial and tax records are retained in line with statutory obligations.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. User rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to request transfer to another controller where technically feasible.
• Right to object: to object to processing based on legitimate interests, and to object at any time to direct marketing.

To exercise any of these rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding. We will respond within the time limits required by law.

Please note that these rights are not absolute and may be subject to legal exceptions and limitations.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain optional features, communications, or services that depend on that consent.

You can withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management option we provide.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

ICO contact details:
Website: https://ico.org.uk
Telephone: 0303 123 1113

11. Data security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include:

• access controls and role-based permissions;
• encryption in transit and, where appropriate, at rest;
• secure authentication and password management;
• regular monitoring, logging, and vulnerability management;
• staff confidentiality obligations and privacy training;
• backup and disaster recovery procedures;
• vendor due diligence and contractual safeguards.

No method of transmission or storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

12. Contact information

If you have any questions about this Privacy Policy or our data protection practices, or if you wish to exercise your rights, please contact:

InsightPulse Analytics Ltd
24 St John's Street, London EC1M 4AY, United Kingdom
Email: [email protected]
Phone: +44 20 7946 5831

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.

Any updated version will be posted on our website with a revised effective date. Where appropriate, we will notify you of material changes by email or by a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how InsightPulse Analytics Ltd processes personal data.