Privacy noticePrivacy notice

Who we are

Hynesense Ltd is the organisation responsible for the personal information described in this notice. We are a private limited company registered in England and Wales, company number 17478313. Our registered office is Unit 2 Keel Row, The Watermark, Gateshead, NE11 9SZ.

We are registered with the Information Commissioner's Office, reference ZC273843.

The AI Business Analyser

When you give the analyser a website address, it reads the public pages at that address and selected public pages on the same website. Before any page text reaches an AI system, scripts, navigation, hidden content, comments, invisible characters, email addresses and phone numbers are stripped. The remaining public page text is used to generate a business profile and blueprint.

We process the website address and public page content for our legitimate interests in providing the analysis requested, protecting the service from misuse and improving the usefulness of an enquiry. If you submit your details to unlock a blueprint, we also process those details to take steps at your request and to respond to you. Marketing is optional and recorded separately when you choose it.

Analyses with no lead attached are marked to expire after 30 days. The deletion process has been built, but it is not yet running on a fixed schedule. Private blueprint links stop working after 90 days. Internet Protocol addresses are stored only as salted hashes for rate limiting, not as plain addresses.

An AI system generates the blueprint. It provides suggestions for a person to review. No automated decision with legal or similarly significant effect is made about anyone.

Enquiries and bookings

When you send an enquiry or ask for a meeting time, we collect the information shown in the form, such as your name, company, email address, website, phone number when provided, preferred time and message. We use it to respond, manage the enquiry and keep a record of the conversation. Optional marketing consent is stored separately from the enquiry.

Business contacts we write to

We sometimes write to people at other businesses to tell them what Hynesense builds. This section explains how we handle those people's details when we did not collect them from the person directly.

We hold your name, job title, work email address, the business you work for and its company number, where we found your details, the public information that made us think of you (for example a published tender or project), and a record of the emails we sent and any reply. We do not hold your home address, personal phone number or social media profile, and we do not collect special category information.

Your details come from public sources: your employer's own website, the Companies House register, published tender and contract notices, planning and energy registers and other public business sources. We may use a service that checks whether a work email address works. We do not buy lists and we do not collect information from LinkedIn.

We use these details to contact you about services that may help your business, and to keep a record so that we do not contact you again if you ask us not to. Our legal basis is legitimate interests: we have a business interest in finding customers, we use as little information as we can, and a relevant approach to a business contact is something you could reasonably expect. We write only to people at limited companies and similar bodies, never to sole traders or to personal email addresses.

Our staff and the suppliers that help us run this work see these details: cloud hosting, email sending and delivery tools, and AI tools that help us draft and sort messages. They act only on our instructions. A person at Hynesense approves what we send. We do not sell your details or share them for anyone else's marketing.

Software helps us decide which businesses to write to and drafts messages. It does not make any decision about you that has a legal or similarly significant effect.

If you have not replied, we delete your details six months after the last email we sent you. If we are in touch, we keep the record while the conversation continues and review it every year. If you ask us to stop, we keep only your email address, the date and the reason on a do-not-contact list, so that we never contact you again by mistake.

You can object to our use of your details for marketing at any time, and we will stop straight away. Reply to any of our emails saying no thanks, use the unsubscribe link in it, or use the contact form. You can also ask to see, correct or delete the information we hold, as described under Your rights.

The client portal

The client portal stores account details and work, including tasks, comments, messages, documents, approvals, requests and files. Access is invitation only. Permissions are enforced for each organisation. Work is internal unless an authorised person deliberately makes it visible to a client. Activity and security events are recorded in an audit trail.

The iOS and Android apps

The Hynesense apps for iPhone and Android give access to the client portal described above, and the same information is stored in the same way.

If you allow notifications, the app registers a push token for your phone so we can send alerts such as mentions and work that needs you. The token is delivered through Firebase Cloud Messaging, a Google service acting for us. It is removed when you sign out or turn notifications off.

The apps receive fixes and improvements through Capgo, a service provider acting for us. When the app checks for an update, Capgo receives a device identifier, the app and operating system versions, and whether an update installed. It is used only to deliver updates, is not linked to your account and is not used for tracking or advertising.

Cookies and local storage

We use browser storage to run the site and portal, including sign-in state and saved interface preferences. We do not currently set advertising, analytics or other non-essential cookies. More detail is in our cookies notice.

Who processes information for us

We use suppliers to provide hosting, data storage, authentication and AI processing. A full list of sub-processors is available on request under a confidentiality agreement.

Some suppliers may process information outside the United Kingdom. The countries involved and the safeguards used for those transfers are awaiting legal review and will be stated here before this notice is approved.

How long we keep information

The analyser periods are set out above. Retention periods for enquiries, bookings, portal records, audit records and files are awaiting legal review. We will not state periods that have not been agreed and implemented.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your personal information, restrict or object to its use, and receive a portable copy. You may withdraw consent at any time where consent is the basis for processing. Use the contact form to make a request. We may need to verify your identity before acting.

You can complain to the Information Commissioner's Office if you are unhappy with how we use your information. You can find current contact details and guidance at ico.org.uk. We would also welcome the chance to address your concern directly.