Privacy Policy

Last updated: 3 November 2026

This policy explains how Pyralink Innovation Ltd handles personal data under the UK GDPR and the Data Protection Act 2018. It covers this website, our free scan and demo requests, the PyraLink™ Prove service, the Pyralink™ USB Firewall waitlist and reservation deposits, and the Pyralink™ Prove It email newsletter. For the USB Firewall, please also read the USB Firewall privacy notice, which gives the details.

1. Who is the controller

Pyralink Innovation Ltd (company number 14512137) is the controller of personal data collected through this website and when you contact us or sign up. Registered office: 502 Aidan House, Sunderland Road, Gateshead, NE8 3HU, United Kingdom. Telephone: +44 191 300 2979. We are registered with the Information Commissioner’s Office (ICO), registration number ZB516923. Contact for privacy matters: info@pyralink.co.uk.

When you use PyraLink Prove with your own cloud accounts, the data about those accounts is your data. In that case we act on your behalf as a processor for any personal data it contains. See the Data Processing Summary.

2. Data we collect

Enquiries and sign-up: name, work email address, company name, phone number (optional), and the content of messages you send us by the website, email or phone.
Subscription and billing: your plan, billing address and subscription status. Payments are handled by Stripe; your card details go to Stripe and are not held by us.
Use of the Service: account details, the cloud accounts you choose to connect, and the findings and evidence records the Service produces about them. This may include technical identifiers such as account names or IDs, and user or role names that appear in cloud configuration.
Website and security data: the campaign tags in the link that brought you to us and the name of the referring website, and technical information used to protect our forms (see section 4).
Website measurement (only if you consent): if you accept analytics or advertising measurement, Google receives the pages you view, the website or advert you came from, your browser and device type, language, approximate location, and actions such as sending an enquiry, going to checkout or completing a purchase or free trial (including the order value and a Stripe order reference). It does not receive your name, email address, phone number, address or card details. See section 4 and the Cookie Notice.
Pyralink™ USB Firewall: if you join the waitlist, your email address and the other details on the sign-up form. If you pay a reservation deposit, also your name, billing address, your design and colour preference and confirmation of your payment from Stripe. See the USB Firewall privacy notice.
Pyralink™ Prove It newsletter: if you subscribe, the email address (and anything else) you enter into Beehiiv's sign-up form, plus the date you signed up and the page you signed up on. See section 10.
You do not have to give us personal data. If you do not give the details a form marks as required, we cannot deal with that request.
We do not seek sensitive personal data. Please do not include it in messages to us.

3. Why we use it, and our lawful bases

To respond to your enquiry and to provide the demo, free scan or trial you ask for. Lawful basis: taking steps at your request before entering a contract, or legitimate interests.
To provide the Service, manage your subscription, take payment and give you support. Lawful basis: performing our contract with you.
To send you relevant follow-up information. Lawful basis: your consent, or legitimate interests where the law allows. You can opt out at any time.
To run the USB Firewall waitlist and take, hold and refund a reservation deposit. Lawful basis: your consent for waitlist emails; performing our contract with you for deposits; legal obligation for accounting records.
To send you the Pyralink™ Prove It newsletter, and to keep a record of your consent and of anyone who has unsubscribed. Lawful basis: your consent. You can withdraw it at any time by unsubscribing.
To measure how people use our website and whether our adverts and Google listings lead to enquiries or sales, using Google Analytics and Google advertising measurement. Lawful basis: your consent, which you can withdraw at any time using Cookie settings in the footer of any page.
To count visits with Cloudflare Web Analytics, which uses no cookies. Lawful basis: legitimate interests, in understanding which pages are useful.
To keep our website, forms and Service secure and to prevent abuse. Lawful basis: legitimate interests.
To keep business and accounting records and meet legal obligations. Lawful basis: legal obligation.

4. Website analytics, campaign tags and form security

If you request a free cloud scan or a demo, we record which link or website brought you to us (the campaign tags in the link and the name of the referring website), so that we can see which of our channels are useful. We do not use this to profile you.

To protect our forms from automated abuse, we use Cloudflare Turnstile and run automated checks on each free scan or demo request: whether your email domain can receive mail, whether the email is a work address, how long the form took to complete, and how many requests have come from the same network. For the network check we keep a one-way scrambled form of your IP address for up to two days; we do not store the address itself. Each free scan request is also reviewed by a person before it is approved. We use this information only to keep the service safe and to decide whether to approve a request.

Google Analytics and advertising measurement (only if you consent). When you first visit, we ask whether you agree to analytics and to advertising measurement. Until you choose, nothing from Google is loaded and no analytics or advertising cookie is set. If you accept, we use Google Analytics to understand how visitors use the site and where they come from, and Google Ads and Google Merchant Center measurement to see whether our adverts and free listings lead to enquiries or sales. We have switched off Google signals and advert personalisation, and we do not use this data to build advert audiences or show you personalised adverts.

Google Analytics 4 does not log or store IP addresses; it uses the address to derive an approximate location and then discards it. For Google Analytics, Google acts as our processor under its data processing terms. For advertising measurement, Google also acts as an independent controller of the information collected through its advertising cookies, under Google’s Privacy Policy. You can withdraw consent at any time using Cookie settings in the footer of any page. The cookies, how long they last and how to remove them are listed in the Cookie Notice.

Cookie-free measurement. We also use Cloudflare Web Analytics, which uses no cookies and stores nothing on your device, to count page visits and where they come from. It runs whether or not you accept the Google options, and works from the page visited, the referring website, the browser type and the country.

5. Who we share data with

We do not sell personal data. We use service providers who process data on our behalf, under written terms, for example: Stripe (payments and subscription management), Cloudflare (website hosting, security and delivery), Google (website analytics and advertising measurement, only if you consent), Beehiiv (the Pyralink™ Prove It newsletter), and providers of email, calendar booking and business systems. We may also disclose data to professional advisers, or where the law requires or allows.

6. International transfers

Stripe and Cloudflare, our main providers, are based in the United States and may process data there and in other countries. Beehiiv, which provides the Pyralink™ Prove It newsletter, is also based in the United States. Both take part in the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”), which the UK government has recognised as providing adequate protection for certified US companies. Where that does not apply to a transfer, their data processing terms include the ICO’s International Data Transfer Addendum (or an equivalent approved safeguard). You can ask us at info@pyralink.co.uk for more information about these safeguards.

Google LLC, which provides Google Analytics and Google advertising measurement if you consent, is also based in the United States and may process data there and in other countries. It takes part in the UK Extension to the EU-US Data Privacy Framework. Where that does not apply to a transfer, Google’s terms include the ICO’s International Data Transfer Addendum (or an equivalent approved safeguard).

7. How long we keep data

Enquiry data: up to 12 months after our last interaction.
Customer account and billing data: for the duration of the customer relationship, then for up to 6 years for legal and accounting record keeping.
Data about the cloud accounts you connect, and the resulting findings and evidence records: for the duration of your subscription and for a limited period afterwards, after which we delete it unless the law requires us to keep it.
Scrambled IP address used for the network check: up to two days.
Google Analytics data: automatically deleted after 14 months. Analytics cookies last up to 13 months and advertising measurement cookies up to 3 months. Your cookie choice is remembered for 180 days, then we ask again.
USB Firewall waitlist and reservation data: as set out in the USB Firewall privacy notice. Payment and refund records are kept for 6 years for accounting and tax reasons.

8. Security

We use technical and organisational measures that we consider appropriate to protect personal data. No system can be completely secure, and we cannot guarantee that data will never be accessed without authority.

9. Your rights

Under the UK GDPR you can ask for access to your personal data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests or direct marketing. You can also withdraw consent at any time where we rely on it. For cookies and website measurement, use Cookie settings in the footer of any page. To exercise a right, contact info@pyralink.co.uk. We will respond without undue delay and within one month, unless the law allows us longer, in which case we will tell you. If you ask for a copy of your data we search for it to the extent that is reasonable and proportionate, and we may ask you to clarify your request. We do not charge a fee unless a request is clearly unfounded or excessive. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

What we collect. The Pyralink™ Prove It sign-up form on our newsletter page is provided by Beehiiv and shown inside our page. When you subscribe, you type your email address (and anything else the form asks for) straight into Beehiiv's form. It goes directly to Beehiiv. Our website does not receive or store it. Beehiiv also records when you signed up and which page you signed up on, and may record technical information such as your IP address and device. Beehiiv's own privacy notice explains what it records.

Why we use it. We use these details only to send you the newsletter, and to keep a record of your consent and of anyone who has unsubscribed. Our lawful basis is your consent, which you can withdraw at any time by unsubscribing. We do not sell your details and we do not use them for anything else.

Who handles it. Beehiiv holds the subscriber list and sends each edition on our behalf. We use double opt-in: after you sign up, Beehiiv emails you a link, and you are only added to the list when you confirm your address. Beehiiv is based in the United States, so your details may be processed outside the UK. Section 6 explains how we approach international transfers, and you can ask us for more information about the safeguards.

Unsubscribing and how long we keep it. You can unsubscribe at any time using the link in any edition, or by emailing info@pyralink.co.uk. We keep your details until you unsubscribe or ask us to delete them. After you unsubscribe, we may keep only your email address and the date you unsubscribed, so that we do not email you again.

11. Cookies

Our use of cookies is explained in the Cookie Notice. In short: strictly necessary cookies are always on; analytics and advertising measurement cookies from Google are set only if you accept, and you can change your choice at any time using Cookie settings in the footer of any page.

12. Complaints

If you think we have infringed data protection law in how we handle your personal data, you can complain to us. Email info@pyralink.co.uk or telephone +44 191 300 2979, and tell us what happened. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you informed of progress and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113. You can contact the ICO at any time, but we would welcome the chance to put things right first.

13. Changes

We may update this policy from time to time. The latest version is published here with the date of the last update.