Privacy Policy

1. What we collect

When you submit a form. Your name, email address, website, phone number if you give it, and whatever you write in the message field. Nothing more.

When you run the free audit. The website address you enter. We fetch that site's public pages to score them. The URL is cached for 24 hours so repeat checks are fast. We do not keep the audit result against your identity unless you ask us for the full report.

When you browse. Google Analytics 4 records anonymised, aggregated usage — pages viewed, approximate region, device type, referrer. We do not use it to identify individuals.

2. Why we collect it

To reply to your enquiry, deliver services you have asked for, send the newsletter if you subscribed, and understand which pages are useful. That is the whole list.

We do not sell your data, rent it, or share it with advertisers. We never will.

3. Who processes it

We use a small number of third parties, each for a single purpose:

• Cloudflare — hosting, security and email routing
• Google Analytics 4 — anonymised traffic measurement
• Resend — transactional email delivery
• Google Workspace and Google Sheets — where enquiries are received and recorded
• Cal.com — call booking, if you book one

Each holds only what it needs to do its job.

4. Cookies

We set no advertising or tracking cookies of our own. Google Analytics sets its own analytics cookies. The consultation popup uses your browser's session storage to remember it has already been shown, so it does not reappear on every page — that never leaves your device.

5. How long we keep it

Enquiries are kept while the conversation is live and for up to 24 months after, so we have context if you come back. Newsletter subscriptions are kept until you unsubscribe. Audit URL caches expire after 24 hours. Analytics follows Google's retention setting.

6. Your rights

Email [email protected] and we will, without argument: tell you what we hold about you, correct it, delete it, or send you a copy. Every newsletter has a one-click unsubscribe link.

If you are in the EEA or UK, you have these rights under GDPR and we honour them regardless of where you are.

7. Security

The site is served over HTTPS with HSTS. Enquiry data sits in access-controlled storage, and the admin area requires authentication and is excluded from search indexing. We hold no card details at any point — payments are handled by the payment provider directly.

8. Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

9. Changes and contact

If this policy changes materially we will update the date at the top and, where it affects an active client, tell you directly.

Questions or requests: [email protected].