Legal
Privacy Policy
Last updated: 8 October 2026
This policy explains what personal data BusinessPulse OS collects when you use businesspulseos.com, why we collect it, who we share it with, how long we keep it and the rights you have over it. It is written for the EU General Data Protection Regulation (GDPR), which applies to visitors in the EU, and for the Law on Personal Data Protection of the Republic of North Macedonia.
Who we are
BusinessPulse OS is operated by BizzBee Solutions DOOEL, Kavadarci, North Macedonia, company registration number (EMBS) 6323995 ("we", "us"). We are the data controller for the personal data described here.
For any privacy question or request, email contact@businesspulseos.com.
What we collect and why
When you just browse
Cookieless visit counting (no consent needed). Until you make a choice in the cookie banner, we count nothing. If you click "Reject", we still count page views and clicks with PostHog in cookieless mode. PostHog stores nothing in cookies or browser storage for this and builds no personal profile; it counts visitors with a privacy-preserving hash calculated on PostHog's servers. The data goes through our own domain (businesspulseos.com/ingest) to PostHog's EU cloud, hosted in Frankfurt, Germany. Legal basis: our legitimate interest in knowing which pages are read and which links are used. You can object by emailing us.
Server logs (no consent needed). The site is hosted by Vercel. When your browser requests a page, Vercel's servers record technical data such as your IP address, browser type, the page requested, the referring page and the time. We use this to run the site, find errors and stop abuse. Legal basis: legitimate interest in a secure, working website.
Analytics and advertising (only with your consent)
If you click "Accept all" in the cookie banner, we also use:
- Google Analytics 4, to see how visitors find and use the site. Google signals and ad personalisation are switched off in our Google Analytics account.
- Meta Pixel, to measure visits from our Facebook and Instagram ads and to show our ads to people who have visited the site.
- Meta Conversions API: when you submit the self-assessment, our server also tells Meta that a lead came in, with your email address in hashed (scrambled) form, your IP address, your browser type and the Meta cookies listed below. This lets Meta count leads that the Pixel misses. It runs only if you clicked "Accept all".
- PostHog session recordings, to see how pages are used, for example where people stop or which questions they skip. Everything you type into form fields is masked before it leaves your browser, so we never see it in a recording.
- Where you came from. We save the ad tags in the link you clicked (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the referring page and the landing page in your browser's local storage, under the name bp_utm_v2, for 90 days. If you later submit the self-assessment, these are stored with your submission so we can see which ads and articles bring useful conversations. They stay in your browser and reach us only if you submit a form.
When you submit a form after accepting, Google Analytics and the Meta Pixel also record that a lead was sent and from which page.
Legal basis: your consent. If you click "Reject", none of these load and nothing from this list is stored. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.
When you take a self-assessment or deep dive
You give us your answers, and to see your results you give us your email address and, where the form asks, your name, phone number, company, company size and industry. We use them to:
- calculate and email you your results;
- send you follow-up emails with practical advice about the areas where you scored low. Every email has an unsubscribe link;
- use your answers, with your name, email and company removed, in our research on small and medium businesses.
Your submission is stored in our database (Supabase) and copied to our email platform (Brevo), with your scores. Legal basis: your consent, given when you submit the form, which states next to the button that we will email your results and follow-up advice and use your anonymised answers in our research. You can withdraw it at any time with the unsubscribe link or by email.
When you contact us or apply for a diagnostic
The contact form, the homepage form and the diagnostic, growth, structure and AI enquiry forms ask for details such as your name, email address, phone number, company, country, number of employees and your message. Formspree emails each submission to contact@businesspulseos.com. We also update your contact record in Brevo to show that you have been in touch, so that our automated follow-up emails stop; this does not add you to any mailing list.
We use these details only to reply and to discuss the work you asked about. Legal basis: steps you asked us to take before a possible contract, and our legitimate interest in answering enquiries.
Cookies and browser storage
| Name | Provider | Purpose | Duration | When |
|---|---|---|---|---|
| bp-consent, bp-consent-ts (local storage) | businesspulseos.com | Remember whether you clicked Accept all or Reject, and when | 12 months, then we ask again | Always (needed to remember your choice) |
| bp_utm_v2 (local storage) | businesspulseos.com | Remembers the ad or page that first brought you here | 90 days | Only after Accept all |
| _ga | Google Analytics | Tells one visitor apart from another | 2 years | Only after Accept all |
| _ga_<container-id> | Google Analytics | Keeps the state of your session | 2 years | Only after Accept all |
| _fbp | Meta Pixel | Identifies the browser for ad measurement and site analytics | 90 days | Only after Accept all |
| _fbc | Meta Pixel | Stores the ad click ID when you arrive from a Meta ad | 90 days | Only after Accept all, and only when you arrive from a Meta ad |
| ph_<project-token>_posthog | PostHog | Keeps the identity and session needed for session recordings | 365 days | Only after Accept all |
| PostHog local storage | PostHog | Holds the rest of the PostHog state in your browser | Until you clear it or switch to Reject | Only after Accept all |
Durations are those published by the providers: Google (support.google.com/analytics/answer/11397207), and Meta and PostHog (posthog.com/docs/libraries/js/persistence). Cookieless counting by PostHog uses no cookies and is not in this table.
Who receives your data
We do not sell your data. These providers process it for us, on our instructions:
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting and server logs | United States; Vercel is certified under the EU-US Data Privacy Framework and also uses Standard Contractual Clauses |
| PostHog | Cookieless counting and, with consent, session recordings | EU cloud, Frankfurt, Germany |
| Supabase | Storing self-assessment submissions | European Union (Ireland) |
| Brevo (EU-based email service) | Results emails, follow-up emails and contact records | European Union (Brevo is a French company) |
| Formspree | Delivering form enquiries to our inbox | United States, on Amazon Web Services; Formspree relies on Standard Contractual Clauses |
| Google LLC | Google Analytics (with consent) | United States; Google LLC is certified under the EU-US Data Privacy Framework |
| Meta Platforms | Meta Pixel and Conversions API (with consent) | United States; Meta states that it relies on the EU-US Data Privacy Framework and/or Standard Contractual Clauses |
North Macedonia is not in the EU. Where data moves from the EU to us or to a provider in the United States, the transfer relies on the EU-US Data Privacy Framework or on Standard Contractual Clauses, as shown above.
How long we keep it
- Self-assessment submissions: 24 months after your last contact with us. Anonymised answers used in research are kept without a limit, as they no longer identify you.
- Brevo contact records: until you unsubscribe or ask us to delete them.
- Enquiries: 24 months after our last exchange, unless they lead to work together.
- Google Analytics data: 14 months.
- PostHog visit counts and recordings, and Vercel server logs: for the period set by the provider's plan that we use.
- Cookies and browser storage: the durations in the table above, or until you delete them or click Reject.
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct data that is wrong or incomplete (rectification);
- delete your data (erasure);
- limit how we use it (restriction);
- stop using it where we rely on legitimate interest (objection);
- send it to you or another organisation in a common machine-readable format (portability);
- withdraw your consent at any time, through "Cookie settings", the unsubscribe link in our emails, or by email. Withdrawing does not affect what was done before.
Email contact@businesspulseos.com. We answer within one month.
You can also complain to the Personal Data Protection Agency of North Macedonia (azlp.mk, info@privacy.mk, +389 2 3230 635), or to the data protection authority in the EU country where you live or work.
Children
This site is meant for business owners and managers. We do not knowingly collect data from anyone under 16. If you think a child has sent us personal data, email us and we will delete it.
Changes
When we change this policy, we change the date at the top of this page. If a change affects what you consented to, the cookie banner will ask you again.