Privacy notice

Last updated: September 30th, 2026.

This notice explains what personal data we collect when you use datafurn.com, why we collect it, and your rights. We keep it short because we collect very little.

Who we are

Datafurn is the controller of your personal data. We are Datafurn Ltd, registered in England and Wales, company 16623948, 58 Kensington Park Road, London, England, W11 3BJ. You can contact us about anything in this notice at privacy@datafurn.com.

What we collect and why

If you apply for a pilot

When you complete the pilot application form we collect your name, work email, phone number, company name, the number of 3-axis flatbed routers you run, how many people work at your company, whether you use Rhino and Grasshopper, and your description of the product you make repeatedly.

We use these details to assess your application and to contact you about it. Our legal basis is our legitimate interest in responding to business enquiries, and, where you ask us to take steps before entering a pilot agreement, taking those steps. If you decline to provide these details we cannot consider your application.

We do not use them for marketing unless you separately agree to it.

If you use the contact form

When you send a message through the contact form we collect your name, your email address and the message you write.

We use these details to read your message and reply to it. Our legal basis is our legitimate interest in responding to enquiries about our business. If you decline to provide these details we cannot reply to you.

We do not use them for marketing unless you separately agree to it.

Website analytics

We use PostHog, a product analytics service, to understand how the site is used and to find errors. It records:

• the pages you visit and how you arrive at them
• clicks on the main calls to action (booking a call, applying for a pilot, the investor page) and whether a pilot application was submitted, but not what you typed into it
• your approximate location, derived from your IP address, and your browser, device and operating system
• JavaScript errors and diagnostic logs from the site

Until you make a choice in the cookie banner, PostHog stores nothing in your browser, and each visit is counted separately. Our legal basis for this is our legitimate interest in understanding and improving the site.

If you accept, PostHog sets a random identifier in your browser (a cookie and local storage entry) so that visits from the same browser can be linked together. Our legal basis for this is your consent. We do not use the identifier to identify you by name and we do not link it to your form submission.

If you decline, PostHog stops recording from that point on and removes any identifier it stored in your browser. Page views counted before you chose are kept, as separate visits that can’t be linked. We also treat a Global Privacy Control or Do Not Track signal from your browser as a decline; in that case PostHog is not loaded and records nothing. You can change your choice at any time with “Cookie settings” at the foot of every page, or block analytics with a content blocker.

We host our PostHog data in the EU.

Spam protection

The pilot and contact forms use Cloudflare Turnstile to tell people from automated bots. Turnstile runs in your browser when a form loads, and collects information about your browser and how you interact with the page. Cloudflare returns a token that we send to Cloudflare, with your IP address, to check it is valid. Cloudflare’s own privacy policy describes how it uses this data. The forms also contain a hidden field that only bots fill in.

Our legal basis is our legitimate interest in keeping the site and our inbox free of spam and abuse.

Booking a call

The “book a call” buttons take you to Microsoft Outlook Bookings. Anything you enter there is handled by Microsoft under its own privacy statement, and by us as a business enquiry once you book.

Investors

If you email us about investing, we use your email and what you tell us to reply, on the basis of our legitimate interest in running our business.

Who we share data with

We use a small number of service providers who process data on our behalf:

We do not sell personal data and we do not share it for advertising.

International transfers

Some of these providers, including Cloudflare, Resend and Microsoft, may process data outside the UK. Where they do, we rely on the UK’s international transfer safeguards, such as the UK Extension to the EU–US Data Privacy Framework or the International Data Transfer Addendum to standard contractual clauses.

How long we keep it

• Pilot applications and related emails: [24 months] after our last contact with you, or until you ask us to delete them. If you become a pilot participant, we keep the data for the length of the pilot and as our agreement with you requires.
• Contact form messages and our replies: [12 months] after our last contact with you, or until you ask us to delete them.
• We do not store form submissions on the website itself. They exist only as emails in our inbox.
• Analytics data: [12 months], after which PostHog deletes it.

Your rights

Under UK data protection law you can ask us to:

• tell you what personal data we hold about you and give you a copy
• correct anything that is wrong
• delete your data
• restrict or object to how we use it
• provide it in a portable format

To use any of these rights, email privacy@datafurn.com. We will reply within one month. Where we rely on consent you can withdraw it at any time.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

If we change how we handle personal data we will update this page and its date.