Privacy Policy
JourneyForce Ltd is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect, how we use it, and your rights.
What we collect
When you contact us through our website, we collect your name, email address, company name, and any information you provide in your message. We also collect anonymous, aggregated analytics about how visitors use our website, via a cookieless tool that does not identify you.
If you take the free AI audit, we also collect your voice audio during the call, a written transcript of it, and the business details you share on the call — including the email address you give us for the summary, and whether you agreed to a follow-up. We keep the recording and transcript while we prepare and follow up on your audit, and we will delete them sooner on request.
How we use it
We use your contact information to respond to your enquiry and, where appropriate, to follow up on potential consulting engagements. We use analytics data to improve our website. We do not sell your data to third parties.
If we contacted you first
We sometimes write to a business that has not contacted us, to tell it what a free check found on its website and to offer our paid AI Visibility Audit. UK GDPR Article 14 requires us to tell you where we got your details, so:
- Your company details come from your own website, found through an ordinary web search, or from the public Companies House register (name, number, registered address and the forename of a serving director).
- Your email address comes from your own website, where you published it. We never guess an address from a person’s name, and we never buy lists.
- What we looked at is the publicly served pages of your website, read the way a search engine reads them. We do not log in, and we do not see anything a visitor could not. We check the company number your site shows against the Companies House register, and an AI model (Anthropic’s Claude) reads your homepage title to describe what you sell.
Our lawful basis is legitimate interest: offering a relevant business service to a company that publishes its address for business enquiries. You can object at any time — reply “no thanks” to any email, or write to the address below, and we will not contact you again. We keep a record of your address for that purpose only, so the suppression is permanent.
If you open the link in our email, the free check runs on your website straight away. We store the website address it checked, the link’s campaign tags, the page you came from (the referrer) and the time in our database, so we can see whether our email was useful.
Third-party processors
We use the following third-party services to operate our website and business:
- Supabase — database and form submission storage
- Resend — transactional email delivery
- Vercel — website hosting, plus cookieless visitor and performance analytics
- Plausible Analytics — cookieless, privacy-focused website analytics, where enabled
- Calendly — scheduling discovery calls
- Cloudflare — DNS and security
- Vapi — voice call infrastructure for the free AI audit, including speech-to-text and text-to-speech
- Anthropic — Claude, which drafts the written summary of your audit call, runs the questions in the paid AI Visibility Audit, and describes what a shop sells for outreach
- Firecrawl — web search and page fetching used to find businesses and their published contact addresses
- Stripe — payments for products bought online
- Google Ads — measuring which of our ads lead to an enquiry or purchase, only if you accept cookies
Website analytics
We use Vercel Analytics, a privacy-friendly, cookieless analytics service, to understand how visitors use our website in aggregate. On some deployments we additionally use Plausible Analytics, which is also cookieless. Neither service uses cookies, collects or stores personal data, creates persistent identifiers, or tracks you across other websites. Because no personal data is processed and no cookies are set, this analytics does not require your consent.
We also use Vercel Speed Insights to measure website performance, such as page load times. This collects anonymous, aggregated performance metrics only and does not identify you.
If you accept cookies on our banner, we also use Google Ads conversion tracking. Google sets cookies and receives your IP address and browser details, so we can see whether a visitor from one of our ads ran a free check, sent an enquiry or bought an audit. The lawful basis is your consent, which you can withdraw by clearing this site’s data in your browser. We do not use it for remarketing. Without your consent it does not load. See our cookie policy.
Data retention
We retain your personal data for up to 24 months from your last interaction with us. After this period, your data will be securely deleted unless we have a legal obligation to retain it.
Your rights
Under UK GDPR, you have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, please contact us at the address below. You can also complain to the Information Commissioner’s Office (ico.org.uk), though we would appreciate the chance to put things right first.
Contact
JourneyForce Ltd (company 13893425, registered office 32 Byron Hill Road, Harrow on the Hill, Middlesex HA2 0HY) is the controller of your data. If you have questions about this policy or wish to exercise your data rights, contact us at shumon@journeyforce.co.uk.