Privacy notice

Who we are

Hynesense is the organisation responsible for the personal information described in this notice.

Company details pending confirmationCompany registration details, registered address and privacy contact are awaiting confirmation.

The AI Business Analyser

When you give the analyser a website address, it reads the public pages at that address and selected public pages on the same website. Before any page text reaches an AI system, scripts, navigation, hidden content, comments, invisible characters, email addresses and phone numbers are stripped. The remaining public page text is used to generate a business profile and blueprint.

We process the website address and public page content for our legitimate interests in providing the analysis requested, protecting the service from misuse and improving the usefulness of an enquiry. If you submit your details to unlock a blueprint, we also process those details to take steps at your request and to respond to you. Marketing is optional and recorded separately when you choose it.

Analyses with no lead attached are marked to expire after 30 days. The deletion process has been built, but it is not yet running on a fixed schedule. Private blueprint links stop working after 90 days. Internet Protocol addresses are stored only as salted hashes for rate limiting, not as plain addresses.

An AI system generates the blueprint. It provides suggestions for a person to review. No automated decision with legal or similarly significant effect is made about anyone.

Enquiries and bookings

When you send an enquiry or ask for a meeting time, we collect the information shown in the form, such as your name, company, email address, website, phone number when provided, preferred time and message. We use it to respond, manage the enquiry and keep a record of the conversation. Optional marketing consent is stored separately from the enquiry.

The client portal

The client portal stores account details and work, including tasks, comments, messages, documents, approvals, requests and files. Access is invitation only. Permissions are enforced for each organisation. Work is internal unless an authorised person deliberately makes it visible to a client. Activity and security events are recorded in an audit trail.

Cookies and local storage

We use browser storage to run the site and portal, including sign-in state and saved interface preferences. We do not currently set advertising, analytics or other non-essential cookies. More detail is in our cookies notice.

Who processes information for us

We use suppliers to provide hosting, data storage, authentication and AI processing. A full list of sub-processors is available on request under a confidentiality agreement.

Some suppliers may process information outside the United Kingdom. The countries involved and the safeguards used for those transfers are awaiting legal review and will be stated here before this notice is approved.

How long we keep information

The analyser periods are set out above. Retention periods for enquiries, bookings, portal records, audit records and files are awaiting legal review. We will not state periods that have not been agreed and implemented.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your personal information, restrict or object to its use, and receive a portable copy. You may withdraw consent at any time where consent is the basis for processing. Use the contact form to make a request. We may need to verify your identity before acting.

You can complain to the Information Commissioner's Office if you are unhappy with how we use your information. You can find current contact details and guidance at ico.org.uk. We would also welcome the chance to address your concern directly.