Privacy & data use
What we collect, why, and how to make us delete it.
We try to keep this short. If anything here is unclear, email hello@pmf-foundry.com and we'll fix it.
Last updated: 11 May 2026 (v2)
Who we are
PMF Foundry is the data controller for the personal information described on this page. For any data request — access, correction, deletion, portability, or consent withdrawal — email hello@pmf-foundry.com.
What we collect
When you complete the Series A Readiness Score and submit the form to unlock your results, we collect:
- Your first name, work email, company name, role, country, and (optionally) phone number and free-text answer about your 12-month outcome.
- Your answers to the 10 diagnostic questions and the resulting score, band, gap, and strength.
- Whether you consented to marketing updates, plus the timestamp, IP address, and browser user-agent at the moment you submitted — kept as proof of consent only.
If you apply for the Scale Readiness Audit or book a session with an advisor through Calendly, that booking and any application notes are processed alongside your diagnostic record under the same legal basis as above.
We’ll never sell your data. We only use it to deliver your diagnostic and, if you opt in, to send relevant updates.
Why we collect it (legal basis)
- Sending you your results. Legitimate interest — you asked for them by submitting the form.
- Following up about the diagnostic, the Scale Readiness Audit, or the Product + GTM Operating System. Legitimate interest — limited to the conversation you started.
- Marketing updates. Only if you ticked the consent box. You can withdraw consent any time by replying "unsubscribe" or emailing us. Withdrawing marketing consent does not affect anything else.
Advisor calls & recordings
Sessions with advisors (Roadmapping, Pre-Mortem, programme calls) may be recorded for our internal notes so we can prepare better follow-ups. We will tell you at the start of any call if it is being recorded, and you can decline.
Recordings are not shared outside the two advisors by default. If we ever want to use a recording, a quote, or anything you said externally — including for marketing, case studies, or content — we will ask you for explicit written permission for that specific use, before we use it. Saying yes once does not extend to other uses.
You can ask us to delete a recording at any time and we will do so within 30 days.
Who we share it with (processors)
We use a small set of third-party tools to operate. Each only processes what it needs:
- Notion — stores diagnostic submissions and CRM notes.
- Resend — sends transactional and (with consent) marketing email.
- Calendly — handles session bookings if you book one.
- Vercel — hosts this website; processes standard request logs.
We do not sell or rent personal data to anyone.
How long we keep it
Diagnostic submissions: up to 24 months after your last interaction, then deleted or anonymised. Marketing-consent records: kept for the duration of consent plus a reasonable period after withdrawal as proof of compliance. Call recordings: up to 12 months unless you ask us to delete sooner.
Your rights
Under GDPR you can ask us to:
- Show you what we hold about you.
- Correct anything that's wrong.
- Delete it.
- Send it to you in a portable format.
- Stop using it for marketing.
- Stop using it altogether.
Email hello@pmf-foundry.comand we'll handle the request within 30 days. You also have the right to complain to your local data protection authority if you think we're mishandling something — we'd rather you tell us first so we can fix it.
Cookies & analytics
We keep this minimal. The site uses functional cookies required to make the diagnostic work and basic platform analytics from Vercel to count page views. No third-party advertising or cross-site tracking.
Changes to this notice
If we make material changes we'll update the "last updated" date above and, for changes that affect existing users, email anyone who has given us their address.