Privacy policy
How Checkfirst collects and uses personal data on this website, including the demo request form and analytics.
Last updated: 3 October 2026 · This policy is published in English.
Who we are
This website is operated by Checkfirst Limited, a private limited company registered in England and Wales (company number 13659810), The Brew, Eagle House, 163 City Road, London EC1V 1NR, United Kingdom. Checkfirst is the controller of the personal data described in this policy.
What we collect
When you request a demo, we collect the details you enter in the form:
| Field | Required | Why we ask |
|---|---|---|
| Name | Yes | To address you and arrange the demo |
| Work email | Yes | To reply and send the meeting confirmation |
| Organisation | Yes | To prepare a demo relevant to your certification or inspection body |
| Your role | Yes | To bring the right people from our side |
| Audits or inspections per year | No | To size the demo and, later, a quote |
If you book a time through our booking page, the meeting service also records the time you choose and any notes you add. If you accept analytics cookies, we also collect information about how you use this website (pages viewed, links clicked, approximate location derived from your IP address, device and browser type).
We do not ask for, and ask you not to send, sensitive personal data.
Why we use it and on what legal basis
- Responding to your demo request and following up about it: our legitimate interest in responding to business enquiries, or steps taken at your request before entering into a contract.
- Measuring and improving the website: your consent, given through the cookie banner. You can withdraw it at any time.
- Keeping records and meeting legal obligations: compliance with a legal obligation.
We do not sell personal data and we do not use it to make automated decisions that have legal or similarly significant effects on you.
Who processes it for us
We use carefully selected service providers who act as our processors under written data processing terms:
| Provider | What it does | Where |
|---|---|---|
| Google Ireland Limited (Google Forms, Google Sheets) | Receives and stores the demo and quote requests you submit through our forms, notifies our team, and checks your work email before showing a licence estimate (Google Apps Script) | EU and United States |
| HubSpot, Inc. (and HubSpot Ireland Limited) | Runs the meeting booking page and sends meeting confirmations. Website analytics if you accept analytics cookies. | HubSpot EU data centre |
| Google (Google Tag Manager, Google Analytics) | Website analytics, only if you accept analytics cookies | EU and United States |
| Microsoft (Clarity) | Heatmaps and session recordings, only if you accept analytics cookies | EU and United States |
| Our website hosting provider | Serves this website and keeps standard security logs | European Union |
We may also share personal data with professional advisers, or where required by law.
How long we keep it
We keep demo-request and contact data for as long as we need it to respond and follow up, and delete it within 24 months of our last contact with you, unless you become a customer or ask us to delete it sooner. Analytics data is kept according to the retention settings of the analytics tools, no longer than 26 months.
International transfers
Where a provider or its affiliates process data outside the UK or European Economic Area, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or an adequacy decision, including the EU–US Data Privacy Framework where the provider is certified.
Your rights
Under UK and EU data protection law you can ask to access, correct or delete your personal data, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. We respond within one month.
Contact and complaints
For any privacy question or request, email support@checkfirst.ai or write to us at the address above. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority in the EU.
Our security practices are described in the Trust centre. Our website terms of use also apply.