Privacy Policy
Last updated: 23 August 2026. What we collect when you contact us, where it is processed, how long we keep it, and how to make us delete it.
Data protection at TechPulse Consulting
This policy is written to be read, not to be survived. It describes what actually happens to your data in our systems — not a generic template.
The short version. We collect what you type into our contact forms, and nothing else that identifies you. We never sell it, never share it for anyone else's marketing, and delete enquiry records after 90 days. Analytics only runs if you accept cookies. Your IP address is hashed before storage — we never keep the address itself.
1. Who is responsible
TechPulse Consulting, Richtistrasse 2, 8304 Wallisellen, Switzerland, is the controller for the personal data described here. For any question about this policy or to exercise a right, write to [email protected] or call +41 77 287 49 67.
We are established in Switzerland and subject to the revised Federal Act on Data Protection (nFADP / revDSG). Where we offer services to people in the European Economic Area, the GDPR applies in addition, and this policy is written to satisfy both.
2. What we collect, and when
We collect personal data in exactly three situations. There is no hidden collection, no data broker enrichment, and no purchased contact lists.
| When | What | Required? |
|---|---|---|
| You submit an enquiry — through the contact form, the Action Hub, the Quick Consult widget, or the guided assistant | Your name, email address, and the message describing your situation. Optionally your company, your phone number, and the industry and service you selected. | Name, email and your message are required — we cannot reply otherwise. Phone and company are optional and can be skipped. |
| Any visit to the site | A one-way cryptographic hash (SHA-256) of your IP address, the page that referred you, and the country your request came from. | Automatic. The hash exists to stop abuse and duplicate submissions; we cannot reverse it to recover your IP address. |
| You accept cookies | Usage statistics through Google Analytics 4 — pages viewed, and which steps of our enquiry flow you completed. | Only with your consent. Refusing costs you nothing on this site. |
We do not ask for and do not want special-category data — health information, political opinions, religious beliefs, trade-union membership, biometric or genetic data. Please do not include any of it in a message to us. If you do, we will delete it.
3. Why we may lawfully use it
| Purpose | Legal basis |
|---|---|
| Reading your enquiry and replying to it | Steps taken at your request before entering a contract (GDPR Art. 6(1)(b)); your own submission under nFADP |
| Keeping a record of the enquiry so a consultant can follow up | Our legitimate interest in running a consultancy (GDPR Art. 6(1)(f)) |
| Blocking automated abuse of our forms | Legitimate interest in keeping the service available (GDPR Art. 6(1)(f)) |
| Website analytics | Your consent, and only your consent (GDPR Art. 6(1)(a)). Withdrawable at any time |
4. Automated processing of your message
When you send an enquiry, an automated language model hosted by Cloudflare reads your message in order to draft the acknowledgement you receive within seconds, and — if you asked us to help identify what you need — to suggest which service and industry your description matches.
We tell you this plainly because you should know a machine read your message before a person did. Two limits apply: no decision with a legal or similarly significant effect is made automatically, and a person reads every enquiry before we reply substantively. If the model is unavailable, you receive a written acknowledgement instead and nothing about your enquiry changes.
5. Where it is processed, and by whom
We keep the processing chain deliberately short. These are all of the third parties that can see enquiry data:
| Processor | Role | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, stores enquiry records in its database, runs the language model that drafts acknowledgements, and delivers our email | Global edge network, including the EU and the United States |
| ntfy | Sends a push notification to alert us that an enquiry arrived, containing its contents | EU |
| Google Ireland Ltd. (Google Analytics 4) | Website usage statistics — only if you accepted cookies | EU and United States |
Transfers outside Switzerland and the EEA rely on the European Commission's Standard Contractual Clauses together with the transfer mechanisms recognised under Swiss law. We do not sell personal data, and we do not share it with anyone for their own marketing.
6. How long we keep it
- Enquiries: 90 days, then automatically deleted by a scheduled process. This is enforced in the database itself, not by anyone remembering to do it.
- Enquiries that become client relationships: retained for the duration of the engagement and afterwards only as long as Swiss commercial and tax law requires.
- Analytics: retained by Google for the period configured in our property, and never linked to your enquiry.
- Your cookie choice: stored in your own browser until you clear it. It never reaches our servers.
7. How it is protected
- Every connection is encrypted in transit (TLS), enforced by HSTS.
- Your IP address is hashed before it is written down; the original is never stored.
- Our administration console is protected by token authentication with a lockout after repeated failures, and is excluded from search engines.
- A strict Content-Security-Policy prevents third-party scripts from running on our pages, which is also why we load no advertising or social tracking code.
No system is perfect. If a breach ever creates a high risk to you, we will notify you and the competent authority as the nFADP and the GDPR require.
8. Your rights
You can exercise any of these free of charge by emailing [email protected]. We answer within 30 days, and we will not ask you to justify the request.
- Access — a copy of the personal data we hold about you.
- Rectification — correct anything inaccurate.
- Erasure — have it deleted. For an enquiry, this is immediate; we do not require a reason.
- Restriction and objection — tell us to stop using it, including where we rely on legitimate interest.
- Portability — receive it in a structured, machine-readable format.
- Withdraw consent — for analytics, at any time, without affecting what was lawful beforehand.
You may also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner, or in the EEA your national data protection authority.
9. Cookies
We use no cookie at all until you accept one. Analytics is loaded only after consent — not loaded-and-disabled, but genuinely not loaded. Full detail is in our Cookie Policy.
10. Children
This is a business-to-business service and is not directed at children. We do not knowingly collect data from anyone under 16.
11. Changes to this policy
If we change how we handle personal data, we update this page and its date. Material changes affecting existing enquiries will be communicated directly.
TechPulse Consulting · Richtistrasse 2, 8304 Wallisellen, Switzerland · [email protected] · Last updated 23 August 2026