Who is responsible?
Beyond Brute Force Systems Limited is the controller of personal information we use to handle business enquiries and operate this website. We are registered in England and Wales, company number 17495620. Our registered office is 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. Contact hello@beyondbruteforce.com for privacy questions or rights requests.
What information is involved?
- Correspondence: the name, email address, organisation, role, message and attachments you choose to send. We may also use relevant professional contact details from public company websites or professional profiles when discussing a business opportunity; we can identify the particular source on request.
- Technical information: our hosting and security providers process connection details such as IP address, browser information, requested pages and request times to deliver and protect the site. Sites also provides hosting-level counts of visitors, page views and requests.
- Local tools: enquiry text is prepared in your browser. The current TokenHoloFold workspace helps prepare an evaluation enquiry. It does not currently read selected files or offer a public Save/Clear report tool.
The enquiry buttons do not send a form submission to our server. You review and send the prepared message using your email app, at which point your email provider and our mailbox handle it. Copying or downloading an enquiry keeps a copy under your control. Please agree confidentiality and scope before sending private datasets, credentials or sensitive personal information.
Optional promotion details with an enquiry
A promotion link may contain public campaign labels, such as LinkedIn, YouTube or a ChatGPT ad. We carry the supported labels through links within this site, without adding an advertising cookie or visitor identifier. A known referring service may be reduced to a source label; we do not include its full URL in your enquiry.
The enquiry form shows an optional source field. You can change it or choose not to include promotion details. When you prepare a message, the complete preview includes a new enquiry reference and the optional source and campaign labels. They reach our mailbox only if you send that email. We use them to understand which promotions result in received enquiries, on the basis of our legitimate interests in evaluating relevant business communications. You can object or remove these optional details before sending. We do not share these enquiry details with advertising platforms, and preparing a message does not subscribe you to marketing.
We distinguish messages prepared in the browser from emails actually received. An enquiry reference helps avoid counting replies or repeat copies as new enquiries. We do not treat a source label as proof that an advertisement was seen or that a customer has bought anything.
Optional website analytics: Google Analytics and Metricool
If you choose Allow analytics, we use Google Analytics 4 to understand which public pages are used and the channels that bring people to this website. Google receives page paths, supported public promotion labels, a reduced referring-service address and technical browser/connection data. On the trial page, optional measurement also records successful account creation, an observation that the service has confirmed email verification, and selection of the Mac installer link. These events contain fixed product and action labels, not account identifiers or form values. A verification-status observation is not a unique new verification; a download click is not proof of completed download or installation. Native trial activations and payments are not inferred from these events. Google Analytics may set first-party measurement cookies. The page/source records are separate from emails actually received.
We use your consent for this optional analytics. Google tracking is blocked until you allow it. You can decline or withdraw using Analytics choices in the footer; withdrawal stops future measurement on this browser and removes the Google Analytics cookies that this site can access. Declining does not affect the website. We do not enable Google Signals, advertising personalisation, User-ID, enhanced form tracking or automatic form-field collection. Enquiry text, email addresses, organisation names and uploaded files are not sent by our analytics code. Google Analytics receives reduced URLs and referring-service addresses. Metricool is loaded only on an explicit set of public pages with safe public URLs and referrers; account, activation, evaluation-workspace and unknown routes are excluded. URLs with unapproved query values or fragments, and visits referred from sensitive account URLs, do not load Metricool. We do not rewrite authentication links to make them trackable.
Google provides Analytics as a processor under its applicable service and data-processing terms. See Google’s privacy information and Google’s data-processing terms. Google operates internationally; we do not claim that all processing occurs in the UK. Google’s user and event data retention is set to two months, with resets on new activity off. This setting does not determine how long Google retains aggregate standard reports. Our browser consent record expires after 180 days; our Google Analytics measurement cookies are configured for 30 days without extending on each visit.
Metricool receives the eligible public page URL, its permitted public promotion labels, an eligible public referrer if present, viewport dimensions and ordinary connection/browser information such as the request IP address. Its tracker is blocked before consent, after decline and on visits marked for testing or debugging. It does not receive our trial signup or account-status events. It is a separate analytics provider from Google; optional measurement starts only after a fresh choice covering both providers, rather than reusing an earlier Google-only permission. Withdrawal blocks pending tracker callbacks and reloads the page with optional tracking disabled. The current Metricool script makes one page-measurement image request and does not schedule ongoing tracking. See Metricool’s privacy information. We do not claim that Metricool processes only in the UK or that browser measurement establishes a completed signup, installation or payment.
Analytics represents measured, consenting browser activity. Ad blockers, refused consent, processing delays and other limits mean that it is not a complete visitor census. Views, prepared enquiries and received emails remain different measures.
Why we use it
- Business enquiries and professional correspondence: our legitimate interests in answering questions, assessing technical fit and arranging relevant business discussions. You can object to this use.
- Steps towards a contract with you: where you ask us to prepare an agreement with you personally, processing may be necessary for those requested steps or to perform that agreement.
- Site delivery, hosting-level aggregate usage, troubleshooting and security: our legitimate interests in keeping a reliable, secure website.
- Required records: compliance with applicable legal obligations, including accounting requirements where relevant.
Providing enquiry details is voluntary, although we need a way to respond and enough information to understand your request. An enquiry does not subscribe you to a mailing list. These website tools do not make decisions about people that have legal or similarly significant effects.
Who receives information?
We use Microsoft 365 for the business mailbox and ChatGPT Sites, operated by OpenAI, with Cloudflare infrastructure for hosting, delivery and security. We may also use AI-assisted tools to help draft or organise business correspondence. Relevant correspondence may be processed by the chosen service for that purpose. Providers receive the information needed for their functions. Your own email provider handles messages you choose to send. Relevant professional advisers or authorities may receive information when necessary for an agreement or legal obligation. We do not sell enquiry details.
Some providers operate internationally, including in the United States. Their published transfer arrangements describe applicable adequacy decisions and contractual safeguards, including standard contractual clauses and the UK addendum where applicable. Their notices and terms explain the safeguards for their processing: Microsoft, OpenAI and Cloudflare. Contact us for information about, or a copy of, the applicable transfer safeguards. We do not represent that all technical data stays in the UK.
How long we keep it
We review inactive business enquiries 12 months after the last contact and delete them unless there is a documented ongoing need. An active evaluation, contract, accounting obligation, dispute or legal claim may require selected records for longer. We retain only the information needed for that purpose and review it when that need ends. This is a review-and-delete policy, not an automatic mailbox expiry.
Provider-controlled technical logs and security cookies follow the relevant provider's retention rules. Copies you download or keep in your own email account remain under your control.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information. If we rely on consent for a particular activity, you can withdraw it. Contact hello@beyondbruteforce.com; we may need proportionate information to confirm your identity.
Your right to object: you can object to processing based on legitimate interests, and to any use of your details for direct marketing. Tell us using the email address above.
You can complain to the Information Commissioner's Office, the UK data protection regulator. You can contact us first so we have an opportunity to address the issue.
Scope and updates
This notice covers the public website and associated business correspondence. Customer software deployments and any processing of customer datasets need their own agreed terms and information before that work starts. Our cookie and browser-storage notice explains the current site features. We update this page when those practices change.
TokenHoloFold evaluation workspace
The current workspace prepares an evaluation discussion; it does not currently offer a public Save/Clear report tool.