Skip to content
Legal

Privacy Policy

Last updated: 7 October 2026

This Privacy Policy explains how Neul Labs Limited (“we”, “us”, “our”), the company operating the Word of GPT brand, collects, uses, and protects your personal data when you use this website (www.wordofgpt.com) or contact us. We are the data controller for the purposes of UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who we are

Neul Labs Limited is a company registered in Scotland under company numberSC767862, with its registered office at 3 South Charlotte Street, Edinburgh, Scotland, EH2 4AN. You can learn more about us at www.neullabs.com. For any privacy matter, contact us at contact@wordofgpt.com.

2. The data we collect

  • Information you give us. When you submit a form (a free demand snapshot, a request to scope a programme, or an agency partner enquiry), we collect details such as your name, work email, company website and any message content. Depending on the form, we also ask about your commercial situation: what you sell or the enquiry you want more of, who buys it, the territory you serve, how you judge a good enquiry, an indicative budget range, timing, your objective and constraints, and your role in approving spend. Agencies may also tell us their agency name and the sector of the end client they are asking about. Please do not send us personal data about your own customers.
  • Business contact data we collect ourselves. To run targeted business-to-business outreach (see section 4), we may collect the name, job title and work email of a person at a company, together with publicly available information about that company, from sources such as the company’s own website and professional profiles.
  • Technical and usage data. Standard, largely aggregated information such as pages viewed and approximate region, collected to operate and improve the site. We aim to minimise the use of non-essential cookies.

3. How and why we use your data (lawful bases)

  • To provide what you request — e.g. preparing a demand snapshot or scoping a diagnostic or programme. Lawful basis: performance of a contract or steps prior to entering one.
  • To respond and follow up about our services. Lawful basis: our legitimate interests in responding to enquiries, balanced against your rights.
  • To contact relevant businesses about our services (targeted outreach, described in section 4). Lawful basis: our legitimate interests in offering a relevant service to businesses, balanced against your rights, and subject to the electronic marketing rules in the Privacy and Electronic Communications Regulations (PECR).
  • To improve our site and offering in aggregate. Lawful basis: legitimate interests.
  • To meet legal obligations where applicable. Lawful basis: legal obligation.

We do not sell your personal data, and we do not send unsolicited bulk email. Our outreach is individual and targeted, as described below.

4. Business-to-business outreach

We sometimes contact businesses we have not spoken to before, when we have a specific, verifiable reason to think our service is relevant to them: for example a new product line, a new territory, or a gap in how their buyers can find and contact them. We write to the person most likely to own that problem, one company at a time. We do not buy mailing lists or send campaigns to lists of addresses.

  • Who we email without consent. Under PECR, unsolicited marketing email may be sent to corporate subscribers, such as limited companies and limited liability partnerships, at their work addresses. Sole traders and certain partnerships are treated like individuals: we do not send them unsolicited marketing email unless they have agreed to it. Where business contact data identifies a person, UK GDPR still applies to it, and this policy covers it.
  • Every message identifies us and lets you opt out. Each message says who we are, why we are writing, and how to tell us to stop. A one-word reply is enough.
  • An objection is permanent. If you ask us to stop, we stop, and we keep the minimum needed (your email address or company domain) on a suppression list so we never contact you again. That is the only reason we retain it.
  • One conversation per company. We deduplicate across our inbound and outbound records. If you or your company have already asked us for something, such as a snapshot or a call, you will not also receive an automated cold sequence.
  • Where we got your details. If we contact you this way, you can ask us where we obtained your details, and we will tell you.

5. Processors and third parties

We use a small number of service providers who process data on our behalf under appropriate agreements — for example, our form provider, hosting provider, email sending provider, and analytics. When you request a snapshot or diagnostic, we query search and AI engines with category-level questions about your market; we do not send your personal contact details to those engines.

6. International transfers

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement / Addendum) to protect your data.

7. How long we keep it

We keep personal data only as long as necessary for the purposes above — typically for the duration of our correspondence and a reasonable period afterwards — then delete or anonymise it. Outreach contact data we collected ourselves is deleted if there is no reply within a reasonable period. Suppression-list entries are kept for as long as we do any outreach, because deleting them would let us contact you again.

8. Your rights

Under UK data protection law you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. You have an absolute right to object to direct marketing. To exercise any of these, email contact@wordofgpt.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to resolve any concern first.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version.

10. Contact

Questions about this policy or your data? Reach us at contact@wordofgpt.com.