Privacy notice

Who controls your data

Cognumi Ltd is the controller for the processing described here. Contact us at hello@cognumi.co.uk.

What we collect

• Details you submit, such as your name, business, work email, enquiry, pilot answers and authorised audit instructions.
• Business prospect details, such as company identity, named work contact details, role, public business facts, source dates and outreach history.
• Consent-controlled analytics and first/last UTM attribution after you accept analytics.
• Minimal keyed suppression identifiers needed to prevent unwanted re-contact.

Where prospect data comes from

We may discover relevant companies and business contacts through Apollo, company websites, professional profiles, business directories and press coverage. We use Companies House to verify corporate status and may use Hunter or ZeroBounce to check whether a named corporate mailbox is deliverable. We record the source and collection date and do not treat public availability as consent.

Why we use the data

We use form data to answer your request, prepare an authorised audit, assess a pilot or provide contracted services. We use limited business-contact data to introduce a relevant Cognumi service, keep communications accurate, measure campaign outcomes and honour objections.

Depending on the context, our lawful basis is taking steps at your request, performing a contract, meeting a legal obligation, consent for optional analytics, or legitimate interests for proportionate business-to-business outreach. We balance those interests against your rights and stop direct marketing when you object.

Who receives the data

Access is limited to Cognumi personnel and service providers needed for hosting, email delivery, analytics you accept, company verification and email verification. Current categories include Vercel, Resend, Sanity, Google Analytics, PostHog, Apollo, Companies House, Hunter and ZeroBounce. A provider receives only the data needed for its task and is reviewed for appropriate safeguards.

Retention

• Contacted prospect details are kept for 180 days after the final marketing event, then contact and source details are deleted or minimised.
• Pseudonymous aggregate campaign events are kept for up to 24 months.
• Minimal keyed suppression records are retained while needed to honour an objection and prevent re-contact.
• Enquiry, client and accounting records follow the period needed to answer the request, provide the service and meet legal obligations.

Analytics and cookies

Essential site features operate without optional analytics. GA4, PostHog, Speed Insights identifiers and campaign attribution load only after you accept analytics. Before consent, we create no analytics identifier or browser-storage attribution. You can withdraw at any time using Cookie Settings in the footer; withdrawal removes analytics identifiers, attribution and analytics cookies from this browser.

Your rights and objections

You may ask for access, correction, deletion, restriction, portability or an explanation of our processing, where those rights apply. You have an absolute right to object to your personal data being used for direct marketing. Reply “no thanks” to an outreach message or email us and we will stop and add the minimum suppression needed to honour your request.

Contact hello@cognumi.co.uk. You may also complain to the Information Commissioner’s Office.