GDPR & data handling

Data within the EU

Data processing takes place within the EU. We use providers and procedures that comply with European data protection legislation.

When data handling begins

Nothing is collected from your business before you decide to work with us. You choose a plan, your account is created as part of that selection, you pay for the first month, and onboarding begins. During onboarding we agree exactly which data and which access the first intelligence cycle needs, and the portal then opens on the workspace tier your plan includes.

The customer stays in control

We analyse the material and the access you provide, and nothing beyond it. You decide what is shared and can withdraw access at any point. Findings are evidence-based and conservative: we do not invent numbers or urgency, and where the evidence is weak we say so rather than presenting it as certainty.

Data processing agreement

When we process personal data on your behalf, we enter into a data processing agreement (DPA) governing purpose, security measures and deletion.

No onward selling

We never sell data on, and we do not use it for any purpose other than delivering and improving the service for you.

Security and access

Access to data is limited to what is required to deliver the service. Customer information and material behind login is protected and handled with full traceability. Portal access follows the plan, so each account sees the workspace tier it is entitled to and nothing beyond it.

Deletion

You may request deletion of your data at any time, during the partnership or after it has ended. Contact us at pineappleai.intel@gmail.com and we will assist you. Invoices and accounting records are the one exception: those we are legally required to keep for the statutory period.

Further information

See our privacy policy for complete information on the processing of personal data, and our terms for the commercial terms of the partnership.