Privacy Policy
Who we are
Inspiretec Ltd is the data controller for the personal data described in this policy.
- Registered company name: Inspiretec Ltd
- Company registration number: 03090173, registered in England and Wales
- Registered office: 3 The Quadrangle, Vision Court, Caxton Place, Cardiff, CF23 8HA, United Kingdom
- Email: hello@inspiretec.com
- Telephone: 029 2000 0033
We have not appointed a Data Protection Officer, as we are not required to do so. Any question about this policy or about how we handle your personal data should be sent to hello@inspiretec.com.
What this policy covers
This policy explains how we collect and use personal data when you visit inspiretec.com, submit an enquiry or demo request, subscribe to our marketing, or use our live chat. It also explains your rights and how to exercise them.
If you are applying for a job with us, our Job Applicant Privacy Notice applies instead. If you are a customer of one of our clients and your data is held in a system we provide to them, our client is the data controller and you should contact them directly.
Personal data we collect
Information you give us
- Name, work email address, telephone number, company name and job role when you request a demo, submit an enquiry, or download content
- The content of your enquiry or message
- Information you provide in live chat conversations
- Your marketing preferences
Information we collect automatically
- IP address, the approximate location derived from it, browser and device type, and operating system
- Pages you view, how you arrived at our site, and how long you spend on each page
- Your interactions with pages and forms, including session recordings and heatmaps generated by our session analytics tool
- Cookie and local storage identifiers, as set out in the Cookies section below
Information we receive from third parties
- Business contact and firmographic information from B2B data providers, used to identify the organisation a website visitor belongs to and to prioritise sales follow-up. In some cases this may include a hashed version of an email address supplied by an identity resolution partner.
Where a form field is marked as required, we need that information in order to respond to you. If you do not provide it, we may be unable to deal with your enquiry.
How we use your personal data, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to demo requests, quotes and sales enquiries | Contract, Article 6(1)(b). Taking steps at your request before entering into a contract. |
| Providing, supporting and administering our platform for client organisations | Contract, Article 6(1)(b) |
| Sending marketing emails, newsletters and event invitations to business contacts | Legitimate interests, Article 6(1)(f). Our interest is promoting our travel technology to organisations likely to need it. You can object at any time. |
| Operating live chat and responding to messages | Legitimate interests, Article 6(1)(f). Our interest is providing responsive support to visitors and customers. |
| Identifying the organisations visiting our website in order to prioritise sales follow-up | Consent, Article 6(1)(a) |
| Measuring how our website is used so that we can improve it | Consent, Article 6(1)(a) |
| Online advertising, remarketing, and measuring advertising performance | Consent, Article 6(1)(a) |
| Keeping our website secure and preventing fraud and technical faults | Legitimate interests, Article 6(1)(f). Our interest is protecting our site, our data and our users. |
| Meeting our accounting, tax and other legal obligations | Legal obligation, Article 6(1)(c) |
| Establishing, exercising or defending legal claims | Legitimate interests, Article 6(1)(f) |
You can ask us for details of the balancing test behind any of our legitimate interests by emailing hello@inspiretec.com.
We do not make decisions about you based solely on automated processing that produce legal effects or otherwise significantly affect you.
Cookies and similar technologies
Cookies are small text files placed on your device. We also use local storage, which works in a similar way. Both are covered by this section.
Strictly necessary cookies are set without asking you, because the website cannot work without them. For every other category we ask for your consent through our cookie banner. You can change or withdraw your consent at any time using the cookie preferences control displayed on our website, and you can block or delete cookies at any time through your browser settings.
Strictly necessary
These are required to deliver the website you have asked for and to remember your cookie choices. They are set by us.
| Name | Purpose | Duration |
|---|---|---|
PHPSESSID | Maintains your session on our web server | Until you close your browser |
wordpress_test_cookie | Checks whether your browser accepts cookies | Until you close your browser |
hu-consent | Stores your cookie consent choices | 365 days |
nitroCachedPage | Records whether a page was served from our performance cache | Until you close your browser |
nitropack_webhook_sync | Limits how often our performance tool checks for configuration updates | 5 minutes |
wp-settings-[id], wp-settings-time-[id] | Stores administration interface preferences. Set only for logged-in website administrators | 1 year |
Analytics and performance
These require your consent. They help us understand how the site is used so that we can improve it.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Distinguishes one user from another | 2 years | |
_ga_70G44RQJP3 | Persists session state for Google Analytics 4 | 2 years | |
__hstc | HubSpot | The main cookie used to track visitors | 6 months |
hubspotutk | HubSpot | Tracks a visitor’s identity and is passed to HubSpot when you submit a form, so that duplicate records can be merged | 6 months |
__hssc | HubSpot | Monitors visitor sessions | 30 minutes |
__hssrc | HubSpot | Detects whether the browser was restarted | Until you close your browser |
_hjSessionUser_3357878 | Hotjar | Stores a Hotjar user ID unique to this website | 365 days |
_hjSession_3357878 | Hotjar | Attributes requests within a session window to the same session | 30 minutes |
Hotjar also records session replays and heatmaps of how visitors interact with our pages.
Our security and content delivery provider, Cloudflare, provides website analytics that does not use cookies or local storage.
Advertising
These require your consent. They are used to show you relevant advertising and to measure whether our advertising works.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_gcl_au | Stores and reports Google Ads conversion information | 90 days | |
_fbp | Meta | Identifies your browser so that advertising can be measured and optimised | Up to 90 days |
_uetsid | Microsoft | Identifies a unique advertising session on our site | 1 day |
_uetvid | Microsoft | Identifies a unique advertising visitor across sessions | 13 months |
bcookie | Browser identifier used to detect abuse of the LinkedIn platform and for diagnostics | 1 year | |
lidc | Facilitates LinkedIn data centre selection | 24 hours | |
li_sugr | Used to make a probabilistic match of a user’s identity | 90 days | |
UserMatchHistory | Stores the time of the last LinkedIn Ads identifier sync | 30 days | |
AnalyticsSyncHistory | Stores the time a sync took place with LinkedIn’s analytics cookie | 30 days |
Functional
These require your consent. They power our live chat.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
intercom-id-[id] | Intercom | Anonymous visitor identifier for live chat | Stored in local storage and does not expire |
intercom-session-[id] | Intercom | Identifies each unique live chat session | 1 week |
intercom-device-id-[id] | Intercom | Identifies each device that interacts with live chat | 270 days |
Visitor identification using local storage
With your consent, our B2B visitor identification tool, Apollo.io, stores identifiers in your browser’s local storage rather than in cookies. These are apolloAnonId, apolloLastRefreshInt, and two entries prefixed with our account identifier that record whether tracking is permitted and queue events before they are sent.
Apollo.io may use an identity resolution partner, LiveIntent, which can associate a hashed version of an email address with your visit. A hashed email address is still personal data, because it can be matched back to you. We use this only to understand which organisations are interested in our platform and to prioritise sales follow-up.
Service providers we work with
We do not sell your personal data, and we do not share it for anyone else’s marketing.
To run our website, respond to your enquiries and manage our relationship with you, we use a small number of trusted suppliers. They process personal data only on our written instructions, under contract, and only for the purposes described in this policy.
| Type of supplier | What they do for us |
|---|---|
| CRM and marketing automation | Managing enquiries, contact records and email |
| Website hosting, performance and security | Keeping the site available, fast and protected |
| Website and session analytics | Understanding how the site is used so that we can improve it |
| Advertising platforms | Delivering and measuring our advertising |
| Live chat | Answering questions from visitors |
| B2B visitor identification | Identifying which organisations visit our site |
| Cookie consent management | Recording and honouring your cookie choices |
| Professional advisers | Accountancy, audit and legal advice where needed |
The specific providers behind our cookies and similar technologies are named in the Cookies section above. We will also disclose personal data where we are legally required to do so.
Sending your personal data outside the UK
Some of our suppliers are located outside the United Kingdom, mainly in the United States. This means your personal data may be transferred out of the UK.
Where we transfer personal data to the United States, we rely on one of the following.
- UK adequacy regulations. The UK has made adequacy regulations under Article 45A covering organisations in the United States that are certified under the UK Extension to the EU-US Data Privacy Framework. Where a recipient holds a current certification that covers the data in question, we rely on those regulations.
- Standard data protection clauses. Where a recipient is not covered by those regulations, we use the Information Commissioner’s International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment.
Hotjar stores data within the European Economic Area, which is covered by UK adequacy regulations, although some of its sub-processors are located outside the EEA.
You can obtain a copy of the safeguards we rely on for any specific transfer by emailing hello@inspiretec.com.
How long we keep your personal data
| Type of record | Retention period |
|---|---|
| Website enquiries and demo requests | 24 months from our last contact with you |
| CRM records for customers and prospects | 6 years from the end of our relationship |
| Marketing subscribers | Until you unsubscribe or object. We review records after 24 months of inactivity. |
| Live chat transcripts | 24 months |
| Website analytics data | 14 months |
| Cookie consent records | 12 months |
| Accounting and transaction records | 6 years from the end of the accounting period they relate to |
Where we no longer need your personal data we delete it or anonymise it. We may keep information for longer where we need it to establish, exercise or defend legal claims, or where the law requires us to.
Keeping your personal data secure
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls granted on the basis of business need, restrictions on who within Inspiretec can access personal data, and contractual security obligations on the suppliers listed above. Inspiretec is PCI DSS Level 2 compliant.
No transmission over the internet can be guaranteed to be completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner’s Office and, where required, tell you.
Your rights
Under the UK GDPR you have the right to:
- Be informed about how we use your personal data, which is the purpose of this policy
- Request access to the personal data we hold about you
- Request rectification of personal data that is inaccurate or incomplete
- Request erasure of your personal data where there is no good reason for us to continue holding it
- Request restriction of how we use your personal data
- Object to processing that is based on our legitimate interests
- Object to direct marketing at any time. This is an absolute right and we will always honour it.
- Request portability of personal data you provided to us, where we process it by automated means on the basis of consent or contract
- Withdraw consent at any time where we rely on consent, including for cookies. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
To exercise any of these rights, email hello@inspiretec.com. We will respond within one month. If your request is complex we may extend this by a further two months, and we will tell you if we do. There is normally no charge.
How to complain
If you are unhappy with how we have handled your personal data, please tell us at hello@inspiretec.com so that we can put it right. You have a right to complain to us under section 164A of the Data Protection Act 2018, and we will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
Changes to this policy
We review this policy regularly and will update it when our processing changes. The date at the top shows when it was last updated. Where changes are significant we will draw them to your attention on our website.