Pulse / Privacy

Privacy Policy

Last updated: 21 July 2026

This policy explains how Pulse handles personal data, both for visitors to this website and for people whose data we process as part of the Pulse platform. We keep it plain and honest. If anything here is unclear, please get in touch using the details below.

Who we are

Pulse is an operations platform for security and facilities-management companies, built and hosted in the UK. "Pulse", "we", "us" and "our" refer to Aether Agency Ltd, the business that operates the pulse-operations.co.uk website and the Pulse service.

Aether Agency Ltd is registered in England & Wales, company number 12641621.

For any privacy matter, you can contact us at privacy@pulse-operations.co.uk.

Controller and processor: which hat we wear

Our role under UK data protection law depends on the data in question:

  • We are the data controller for personal data relating to this website and our own marketing, such as the details you send us through a contact or demo request.
  • We are a data processor for the operational data that our customers put into the Pulse platform (for example their officers, sites, patrols and incidents). Our customer is the controller for that data, and we only process it on their documented instructions under a Data Processing Agreement (DPA).

If your personal data sits inside a customer's Pulse account and you want to exercise your rights over it, the customer is the controller and your request is usually best directed to them. We will support them in responding.

What personal data we collect

Website and marketing

When you use our contact or demo request form, we collect the details you choose to give us, typically your name, your email address, and the content of your message. We use this to reply to you and to arrange a demo.

Product data (as a processor)

When our customers use Pulse, the platform processes data on their behalf. Depending on how the customer has set things up, this can include staff names and contact details, roles and shift information, site and location data, patrol and checkpoint records, photo evidence, and incident reports. We handle this data on the customer's instructions and do not use it for our own purposes.

How we use personal data and our lawful basis

  • Responding to enquiries and arranging demos — our lawful basis is legitimate interest (running and growing our business by replying to people who contact us).
  • Marketing emails, where we send them, are sent on the basis of your consent, and you can withdraw that consent and unsubscribe at any time.
  • Providing the Pulse service to our customers — we process product data as a processor, on the basis of our contract and DPA with each customer.
  • Security, troubleshooting and improving the service — legitimate interest in keeping the platform reliable and secure.

Cookies and analytics

Our website uses privacy-friendly, cookieless analytics from Plausible. It does not set tracking cookies, does not follow you across other sites, and does not build an advertising profile of you. It gives us simple, aggregate figures such as page views and referrers, with no cross-site tracking. Because of this, there is no non-essential cookie to consent to on this site. For the full detail, see our Cookie Policy.

Data sharing and sub-processors

We do not sell personal data, and we do not share it with third parties for their own marketing. We do rely on a small number of trusted service providers who process data on our behalf, under contract, to run our website and service. These typically include:

  • Hosting and infrastructure providers, to run the website and platform;
  • An email provider, so we can reply to you and send service messages;
  • Our analytics provider (Plausible), for the cookieless, aggregate statistics described above.

We may also disclose information where we are legally required to do so, for example to comply with a lawful request from an authority.

International transfers

Pulse is hosted in the United Kingdom, and we aim to keep personal data within the UK. Where any provider we use processes data outside the UK, we put appropriate safeguards in place as required by UK GDPR (such as an adequacy decision or the International Data Transfer Agreement).

Data retention

We keep personal data only for as long as we need it. Website enquiry data is kept for as long as needed to deal with your request and for a reasonable period afterwards for our records. Product data processed on behalf of a customer is retained in line with our agreement with that customer, and is deleted or returned when the agreement ends, subject to any legal retention obligations.

Your rights under UK GDPR

Where we are the controller of your data, you have the right to:

  • Access the personal data we hold about you;
  • Ask us to correct inaccurate or incomplete data (rectification);
  • Ask us to erase your data (erasure);
  • Ask us to restrict or object to how we use it;
  • Receive your data in a portable format (portability);
  • Withdraw consent at any time, where our processing relies on consent;
  • Complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We would welcome the chance to resolve any concern with you first.

How to contact us or make a request

To make a request or ask a question about this policy, email privacy@pulse-operations.co.uk. We will respond within the timescales required by UK GDPR. We may need to verify your identity before acting on a request.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above. Significant changes will be made clear on this page.