PurposeFit Privacy notice
Last updated 17 October 2026
This notice explains, in plain English, what personal data PurposeFit AI collects, why, who we share it with, how long we keep it and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The short version: you can use the recommender and browse tools without giving us any personal data. Our site sets no cookies and runs no analytics, advertising or tracking scripts. We only get personal data if you email us, send us a tool submission or (once it launches) sign up to our newsletter.
1. Who we are
PurposeFit AI (purposefitai.co.uk) is run by Mobmodz Limited, a company registered in England and Wales with company number 11328121. Mobmodz Limited is the controller of the personal data described in this notice, which means we decide how and why it is used. Our registered details are on the Companies House register.
For anything to do with privacy, including using your rights, email [email protected]. We are a small business and have not appointed a data protection officer.
2. What we collect
Using the recommender and browsing tools
The recommender runs entirely in your browser. What you type is not sent to us or stored by us. Your search can appear in the page address (for example index.html?q=…); if you reload, bookmark or share that address, the search text is included in the web request and so may appear in the security logs described below. Please don’t type personal information into the search box.
Our newsletter (not yet live)
We plan to offer an optional email newsletter. If you sign up, we collect your email address and, if you choose to give it, your first name. Our newsletter provider also records when and how you signed up, and may record whether our emails are opened and which links are clicked, so we can see what’s useful.
Emails you send us
If you email us, we receive your email address, your name if it’s included, the content of your message and any attachments, and technical details that come with any email (such as the time it was sent).
Tool submissions
Our submit page doesn’t send anything to us automatically. When you press “Prepare submission”, your browser builds the details of the tool (name, website, pricing, categories and description), keeps a copy in your own browser (see cookies and browser storage) and prepares an email for you to send from your own email program. We only receive the submission if you choose to send that email. It includes your email address if you typed one into the optional field, and the email address you send from.
Server and security logs (Cloudflare)
Our site is hosted on Cloudflare Pages. Like any website, when your browser requests a page, Cloudflare automatically processes technical information such as your IP address, the page requested, the date and time, your browser type and the referring page. Cloudflare uses this to deliver the site and protect it from attacks and abuse. We don’t use it to identify visitors.
We don’t ask for, and ask you not to send us, special category data (for example, health information).
3. Why we use it and our lawful bases
UK GDPR requires us to have a lawful basis for each use of personal data:
| What we do | Lawful basis |
|---|---|
| Send you our newsletter, and keep a record of your sign-up and any unsubscribe request | Consent. You can withdraw it at any time using the unsubscribe link in every email or by emailing us. We keep a minimal record after you unsubscribe so we don’t email you again (legitimate interests and compliance with marketing rules). |
| Reply to your emails and enquiries, and keep a record of our correspondence | Legitimate interests: running our business and responding to the people who contact us. If your email is about a contract with us, the basis is contract. |
| Review tool submissions, keep our catalogue accurate and contact you about your submission | Legitimate interests: maintaining an accurate, useful catalogue. |
| Host the site and keep it secure (security logs, preventing attacks, spam and abuse) | Legitimate interests: keeping our site and email available and secure. |
| Meet legal and regulatory requirements and deal with legal claims | Legal obligation or legitimate interests, as relevant. |
Where we rely on legitimate interests, we have considered your interests and rights and believe they are not overridden; you can ask us for more detail and you have the right to object (see your rights). We don’t sell your personal data, use it for advertising profiles or make decisions about you using only automated means that have legal or similarly significant effects.
4. Who we share it with
We use a small number of service providers (“processors”) that handle personal data on our behalf, under contracts that require them to keep it secure and only use it on our instructions:
- Cloudflare, Inc. (United States, with a global network) — website hosting (Cloudflare Pages), content delivery, security, and email routing (Cloudflare Email Routing receives emails sent to our address and forwards them to our inbox).
- Our email inbox provider — stores the emails forwarded to us.
- Kit (kit.com, formerly ConvertKit; based in the United States) — will store our newsletter subscriber list and send the newsletter, once the newsletter launches.
We may also share personal data if the law requires it, to protect our rights or others’ safety, or with professional advisers (such as accountants or lawyers) bound by confidentiality. If our business were sold or restructured, personal data could transfer to the new owner, who would have to treat it in line with this notice.
5. International transfers
Cloudflare and Kit are based in the United States and may process personal data outside the UK. When personal data is transferred outside the UK, we make sure it is protected by a safeguard recognised under UK data protection law. Depending on the provider, this may be the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”), where the provider is certified under it, or contractual safeguards such as the ICO’s International Data Transfer Agreement or the International Data Transfer Addendum to the EU standard contractual clauses. You can email us for more information about the safeguards in place.
6. How long we keep it
| Data | How long |
|---|---|
| Newsletter subscription (email address, first name, sign-up record) | Until you unsubscribe or ask us to delete it. After that, we keep only your email address on a suppression list so we never email you again. We may delete subscribers who haven’t opened an email in over 12 months. |
| Emails and enquiries | Up to 2 years after our last contact, unless we need them longer for a legal reason (for example, business records we must keep for tax purposes, normally 6 years). |
| Tool submissions | The tool details may be kept for as long as the tool is listed or under review. Your contact details are kept for up to 2 years after our last contact about the submission. |
| Server and security logs | Held by Cloudflare for a limited period in line with its own retention policies; we don’t keep separate copies. |
7. Cookies and browser storage
Our site sets no cookies. It uses no analytics, advertising or tracking scripts, and doesn’t load scripts or fonts from other companies. That’s why there’s no cookie banner.
- Browser storage on the submit page. When you prepare a tool submission, a copy is saved in your own browser’s local storage (under the name
submissions) so you don’t lose it. It stays on your device and is never sent to us. You can delete it at any time by clearing this site’s data in your browser settings. This is strictly necessary to provide the feature you asked for. - Cloudflare security cookies. In some circumstances, for example if its security systems need to check that a visitor isn’t a bot, Cloudflare may set strictly necessary security cookies (such as
__cf_bmorcf_clearance). These are used only for security, not for tracking. - Affiliate and outbound links. Some links are affiliate links, labelled Ad. If you click one, or any link to another website, that website and its affiliate network may set cookies on their site, for example to record that you came from us. Those cookies are controlled by them, not us; please check their cookie and privacy notices.
- Newsletter form (when live). Signing up sends your details directly to Kit. Our page doesn’t set cookies in doing so, but if your browser is taken to a Kit page to complete sign-up, Kit may set cookies on its own site.
If we ever add analytics (we’d choose a privacy-friendly option designed to work without cookies), or anything else that stores or reads information on your device, we’ll update this notice first and ask for your consent where the law requires it.
8. Your rights
Under UK data protection law you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is wrong or incomplete.
- Erasure — ask us to delete your data in certain circumstances.
- Restriction — ask us to limit how we use your data in certain circumstances.
- Objection — object to our use of your data where we rely on legitimate interests, and object at any time to direct marketing.
- Portability — ask for data you gave us, where we rely on consent or contract, in a commonly used electronic format, or ask us to send it to another organisation.
- Withdraw consent — where we rely on consent (such as for the newsletter), you can withdraw it at any time. This doesn’t affect anything we did before you withdrew it.
To use any of these rights, email [email protected]. It’s usually free. We may need to confirm your identity, and we’ll reply within one month (this can be extended by up to two further months for complex requests, in which case we’ll tell you). Some rights have exceptions, and we’ll explain if one applies.
9. How to complain
If you’re unhappy with how we’ve handled your personal data, please tell us first at [email protected] and we’ll try to put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO): ico.org.uk, helpline 0303 123 1113.
10. Children
PurposeFit AI is aimed at businesses and adults, not at children under 16. We don’t knowingly collect personal data from children. In the UK, children under 13 can’t give their own consent to online services, so if you are under 13 please don’t sign up to our newsletter or send us personal data. If you think a child has given us their data, email us and we’ll delete it.
11. Links to other sites
Our site links to AI tools, their pricing pages and our X account (@Purposefit_ai). Once you leave our site, the other website’s own privacy notice applies, and we’re not responsible for how it uses your data.
12. Changes to this notice
We’ll update this notice when we change how we use personal data — for example when the newsletter goes live or if we add analytics — and change the “last updated” date at the top. If a change significantly affects you, we’ll tell you where we can (for example, by email if you’re a newsletter subscriber).