Pulse Digital Health← Back to sign in

Privacy Policy

How we look after your personal data when you use the dashboard.

Last updated: 6 October 2026

Pulse Digital Health Group Ltd. is incorporated and registered in the UK and is the data controller for the Dashboard at https://dashboard.pulsedigital.health. This policy explains what personal data we collect when you use the Dashboard, how we use it, and the rights you have over it.

It covers the Dashboard only. Our main website at pulsedigital.health has its own privacy policy and cookie policy.

Personal data means anything that can be used to identify you, such as your name, email address or how you use the service.

Information you give us:

  • your name, email address and password. We never store your password in readable form;
  • your company name, contact name and business type, which you give us when you set up your account;
  • if you sign in with Google: your Google account name and email address (we ask Google for the basic "openid", "email" and "profile" details only).

Information from Google, only if you choose to connect your Google Business Profile: the names of the locations on your profile and the reviews on them (the reviewer's name, star rating, review text, dates and any reply).

Information we collect automatically: your IP address, browser type, device and operating system, the pages you use and when, and security logs. We use this to keep the Dashboard working and secure, and (through Google Analytics, see section 8) to understand how it is used.

  • From you, when you sign up, set up your account, change your settings or contact us.
  • From Google, with your permission, when you connect your Google Business Profile.
  • Automatically, when you use the Dashboard (see section 2).

We use your personal data only to:

  • create and run your account and show you your reviews (this is needed to provide the service you asked for);
  • send you emails about your account: confirming your email address, resetting your password when you ask, and the review alerts you set up. Alerts go to your own confirmed email address only;
  • keep the Dashboard secure, stop abuse and fix problems (our legitimate interest in running a safe service);
  • meet our legal duties.

Where we use your Google data, we do so because you chose to connect it, and you can withdraw that choice at any time (see section 8).

We do not sell your personal data. We do not use it for advertising. We do not share your data with other users or with our clients.

Our staff cannot browse your reviews or business data in the Dashboard. They can only see basic usage figures: your name, email, company, when you signed up, when you were last active, whether a profile is connected, how many reviews have been synced, and which tools are switched on for you.

A small number of technical staff and the providers in section 7 can reach data at infrastructure level (for example databases, backups and logs) so they can run, secure and support the service. They may only do this for those purposes, and they are bound to keep it confidential.

If you connect your Google Business Profile, we receive data from Google about your locations and reviews. When you sign in with Google, we receive your name and email address.

Pulse Digital Health's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms:

  • we only use Google data to provide and improve the features you can see in the Dashboard;
  • we do not use it to serve advertising, and we do not sell it;
  • we do not transfer it to anyone else except to run the service for you (for example our hosting and database providers), to follow the law, or with your permission;
  • our people do not read your Google data, except where you ask us for support, where we need to for security or to fix abuse, or where the law requires it.

You can see and remove our access at any time in your Google Account, under the apps that have access to your account (myaccount.google.com/permissions), or by choosing Disconnect in the Dashboard.

We use these providers to run the Dashboard. They process data on our behalf:

  • Supabase: our database and sign-in service. Our database is hosted in London (UK).
  • Netlify: web hosting.
  • Resend: sending the emails described above.
  • Cloudflare Turnstile: a bot check on the sign-in, sign-up and password-reset pages.
  • Google: sign-in, Business Profile data, Google Analytics (see section 8), and the fonts the Dashboard loads (loading them sends your IP address to Google).

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards, such as the UK's approved transfer mechanisms. We only use providers that give us suitable data protection commitments.

The Dashboard uses cookies and similar storage that are strictly necessary to run it: keeping you signed in, remembering your light or dark theme and your welcome-tour progress, and security. The Cloudflare Turnstile bot check on the sign-in, sign-up and password-reset pages may also set a short-lived technical cookie.

We also use Google Analytics (GA4) on the Dashboard to understand how it is used, for example which pages are visited and on what kind of device, so we can improve it. Google Analytics sets cookies (named _ga and _ga_*) that can last up to two years. It does not store your full IP address, and we do not use it to identify you personally. More information is in Google's own privacy policy.

We do not use advertising cookies. You can block or delete cookies in your browser settings, but the Dashboard will not work without the ones it needs to keep you signed in. You can also use Google's browser add-on to opt out of Google Analytics.

We use HTTPS throughout the Dashboard. We use access controls so that each account only sees its own data. Your Google access key is stored in an encrypted vault. It is never shown in the Dashboard, and only our sync service can use it. We only give our team access to what they need.

If there is a data breach that puts your data at risk, we will take immediate steps to contain it and will contact the people affected and the regulator where the law requires.

  • While your account is open, we keep the data you gave us and, if you connected Google, the reviews and locations we fetched, so the Dashboard can show them to you.
  • If you disconnect Google (or remove our access in your Google Account), we stop syncing and delete your access key. The reviews we had already stored stay in your account until you ask us to delete the account or remove them.
  • If you ask us to delete your account, we delete your account details, your connected profile records, the reviews we stored, your alert rules and email history, and your Google access key.
  • Copies in our backups are removed on the providers' normal backup cycle.
  • We may keep a small amount of information (for example that an account existed and when it was deleted) where we need it to meet a legal duty or to prevent abuse.

To disconnect Google, delete your account or ask us to remove data, email us at info@pulsedigital.health. We will do it within one month.

Under UK data protection law you have these rights:

  • Right of access (UK GDPR Article 15).
  • Right to rectification (Article 16).
  • Right to erasure, or the right to be forgotten (Article 17).
  • Right to restriction of processing (Article 18).
  • Right to be informed (Article 19).
  • Right to data portability (Article 20).
  • Right to object (Article 21).
  • Right not to be subject to a decision based solely on automated processing, including profiling, that has legal or similarly significant effects on you (Article 22).

To use any of these rights, contact us (see section 12). We will reply within one month.

For any questions, complaints or requests about your personal data, email us at info@pulsedigital.health, or write to Pulse Digital Health Group Ltd., 123 Buckingham Palace Road, London SW1W 9SR, United Kingdom.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ico.org.uk).

We may make changes to this policy from time to time, for example to reflect changes in the Dashboard or in the law. The "Last updated" date at the top shows when it was last changed.

We will notify you by email of any significant changes. We also encourage you to review this policy from time to time.