Awaiting solicitor review. This policy accurately describes how the site and client portal handle personal data today. It has not yet been reviewed by a UK solicitor, so treat it as a statement of practice rather than a final legal document.

Privacy Policy

This policy explains what personal information Momentum Inspire collects, why we hold it, how long we keep it, and how to get it removed. Last updated 12 August 2026.

Who we are

Momentum Inspire Limited, a company registered in England and Wales (company no. 14082947), registered office 66 Paul Street, London EC2A 4NA, trading as Momentum Inspire (“we”, “us”). We are the data controller for the personal data described here. Contact: connect@momentuminspire.com.

What we collect, and why

If you fill in the contact form

Your name, company, email address and the message you write. We use it only to reply to you and to keep a record of the conversation. Lawful basis: legitimate interests, namely responding to someone who has asked us to get in touch.

If you run the free business health check

Your email address, the company name and the website address you enter, and the report we generate for you. We use it to return your result and to follow up about it. Lawful basis: legitimate interests, namely providing the report you asked for and offering related help. You can ask us to delete it at any time using the details below, and we will not pass it to anyone else.

If you are a client with a portal account

Account data: your name and email address. Your password is stored only as a cryptographic hash by our authentication provider, never in a form we or anyone else can read.
Client intake: company name, website address and the targeting preferences you give us.
Service records: requests you raise, connections we make for you, outreach statistics, and any feedback you submit.

Lawful basis: performance of our contract with you.

We do not collect or store your LinkedIn username or password. Where our delivery work needs access, it is shared separately through a secure password-manager vault and never through this website or by email. The database has no column to store those credentials in.

If we have contacted you about your business

We approach businesses directly when something in their public filings suggests our help would be relevant, such as a change of registered office or a new director appointment. If you have had an email from us and did not ask for it, this section is the one that applies to you.

What we hold: your name, your job title, the company you work for, the public filing that prompted us to write, your work email address, the message we sent you, and whether you replied.
Where we got it: the Companies House register, which is public, for the company and your appointment to it. Your work email address was found from publicly available business sources, not bought from a list broker and not taken from any consumer database.
What we do not hold: your personal or home contact details, and nothing about you outside your professional role.

Lawful basis: legitimate interests, namely approaching a business about services relevant to a change in that business. We write to people in their professional capacity about their work, never to consumers, and we keep the volume low enough that each message is written for the company it is sent to.

How to stop it, and how we honour that. Reply to any message with the word stop and we will add you to a do-not-contact list and not write again. You can also email connect@momentuminspire.com. We keep that list indefinitely and on purpose: it is the only way to be sure that an objection is not forgotten when your details come up again from a later search, or if you move to another company. It holds nothing beyond what is needed to recognise you and not write to you.

We keep the rest for 24 months from the last contact and then delete it automatically. You can ask us to delete it sooner and we will, within one month. Deleting your details does not remove you from the do-not-contact list, because that would undo the protection you asked for.

Who else sees it

We do not sell personal data and we do not share it for advertising. It is handled on our behalf by:

Supabase: authentication and database hosting (EU region).
Resend: sending transactional email.
Vercel: website hosting.
Anthropic: powers the site chat assistant. What you type into the chat is sent to Anthropic to generate a reply. Please do not enter anything confidential there.
Google: analytics, but only if you accept cookies.

Where your data goes

Our database is hosted in the European Union. Some of the suppliers above are based in the United States, so where they process personal data on our behalf it may be transferred outside the United Kingdom.

Where that happens we rely on the UK’s International Data Transfer Addendum to the European Commission’s standard contractual clauses, or on UK adequacy regulations where the country has been recognised as providing an equivalent standard of protection. In plain terms: the supplier is contractually bound to protect your data to the same standard we are.

If you would like a copy of the safeguards for a particular supplier, email us and we will send it.

How long we keep it

Contact form enquiries and business health check submissions: 24 months from the date received, then deleted.
Client account and service records: for the life of the engagement and six years afterwards, which is the period we are expected to keep business records for tax and legal purposes.
Business contacts we have approached directly: 24 months from the last contact, then deleted automatically.
Our do-not-contact list: kept indefinitely, which is deliberate. It holds only what is needed to recognise somebody who has asked us not to write to them. Deleting it would mean forgetting they asked.
Security logs: these record failed sign-in attempts and similar events so we can spot an attack. They contain email addresses for sign-in events and a partial IP address, never passwords or session tokens.

Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to us using it. Email connect@momentuminspire.com and we will respond within one month.

If you ask us to delete lead data, we remove it outright. If you are a current client, some records may need to be kept to meet legal obligations, and we will tell you exactly what and why rather than simply refusing.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and analytics

We set essential cookies needed to keep you signed in to the client portal. These are necessary for the site to work and are not used to track you.

We also use Google Analytics to understand how this site is used, which pages are read and how people arrive. Google Analytics sets cookies, so we ask before it does anything. When you first visit, you are offered a clear choice between Accept and Decline, given equal prominence. Until you accept, no analytics cookies are set and no analytics data about your visit is stored on your device.

If you decline, the site works exactly as it would otherwise. Nothing is withheld and you will not be asked again on that browser. Your answer is remembered using a single entry in your browser’s local storage, which is the only thing we keep on your device without asking, because remembering that you said no should not itself require permission.

We do not use advertising cookies, we do not build advertising profiles, and we do not share analytics data for advertising personalisation. Google processes this data as our processor. To change your mind, clear your browser storage for this site and you will be asked again.