Privacy Policy

What we collect

When you use the contact form on this site, we collect the information you provide: your name, email address, phone number (if given), and the message you send. If you run a free website audit, we also collect the email address and website URL you submit. If you buy the Fix Kit, Stripe collects and processes your card details on our behalf. We never see or store card data. We don't collect any other personal data automatically beyond what's described under Cookies below.

When we audit a website, the report also keeps what each check found on the site's public pages and records: for example the page title and description, which security headers are missing, the site's SPF and DMARC records, and which links are broken. Where that includes contact details we keep less. Our check for an email address keeps only its domain, the part after the @. Our check for a phone number keeps only whether one is shown, whether it is a tap-to-call link, and its country calling code. Our check for a postal address keeps only whether one is shown and how we recognised it, such as a postcode. Text we quote from the site, such as a page title or an error message, is kept as written, except that email addresses in it are reduced to their domain and phone numbers written in it are removed. Full web addresses are kept without anything after a ? or #.

Free audit report links stop working 30 days after the scan. A report you have bought the Fix Kit for is kept so you can come back to it. If that payment is refunded or disputed, access to the Fix Kit ends and the report link stops working 30 days later.

How we use it

We use your contact details solely to respond to your enquiry, send you the audit report you requested, or deliver the Fix Kit you purchased. We won't add you to a mailing list or share your details with third parties beyond the processors named below.

Where it's stored

Contact form submissions and audit reports are stored in Google Firebase Firestore (Google LLC, europe-west2 / London). Paid orders, and audit lead details collected before July 2026, are stored in Supabase (Supabase Inc., eu-central-1 / Frankfurt). Card payments are processed by Stripe Payments Europe Ltd. Stripe retains payment data per their privacy policy at stripe.com/privacy.

When you buy the Fix Kit, we send your website address and search terms about your type of business and area to DataForSEO (DataForSEO OÜ, Estonia), which gathers the search-ranking and competitor data in your report. Re-scanning a report that has an active Fix Kit sends nothing to DataForSEO. Re-scanning any other paid report sends the same address and search terms again. We never send it your name, email address or payment details. DataForSEO may process this on servers in the United States, under Standard Contractual Clauses, and keeps it for up to a year.

If you use the Fix Kit's preview check, your coding agent sends us the address of a preview copy of your site. Our servers and our browser service, both in the EU, load that address, and we send it to Google PageSpeed Insights, as a full audit does. We return the results to your agent. We keep a count of the preview checks made with your kit, not the address or what the check found.

If you claim a free report, we also send DataForSEO a question that names your business type and town, such as asking who the best plumbers in Leeds are. We also send your country where we know it. We never send your business name or email address. DataForSEO passes that question on our behalf to OpenAI, Google, Anthropic and Perplexity, and returns their answers, so the report can show whether those AI tools name your business, and which websites they cite. Separately, we send your website address to Brave Search (Brave Software, Inc., United States) to check whether your site appears in its search index.

When we scan a website, we send the text and addresses of up to five of its public pages, and the business name, town and type of business where we know them, to TypeSafe (TypeSafe AI, Inc., United States). Its model reads the pages and judges whether they say clearly who the business is and what it offers. We never send your name, email address or the link to your report. TypeSafe processes this in the United States. It does not use it to train its models, and keeps it only as long as it needs to provide the service.

Our data processors are Google, Supabase, Stripe, DataForSEO, Brave Search and TypeSafe, plus Plausible for analytics (see below).

Apart from what we send to DataForSEO, Brave Search, TypeSafe and Google PageSpeed Insights, your data is storedonly in the UK and EU, and everything we run, meaning the website, the audit pipeline, and the service that sends your report by email, runs in the EU (Google Cloud, Netherlands). Email is then handed to Google Workspace for delivery; as with any email provider, Google's mail network is global, and the final hop into your inbox depends on your own provider too.

Cookies

The public site sets no cookies. There are no advertising cookies, no analytics cookies and no third-party tracking technologies. Because nothing here requires consent, there is no cookie banner to dismiss.

Signing in to the admin area does set a session cookie, but that area is not reachable without an account and no visitor to the public site encounters it.

Page speed measurement

To check that pages load quickly, your browser reports a few timings for the page you are on: how long the page took to start and to appear, whether the layout moved, and how quickly the page responded to a tap. With them we record the page's address (without anything after a "?"), whether the page was a fresh load, a reload, or back/forward, whether your browser window is phone, tablet or computer sized (from its width), and your connection type if your browser shares it. We do not record your IP address, your browser details or any identifier, and we set no cookie for it. These readings are stored in the UK (Google Cloud, London) and deleted after 90 days.

Analytics

We measure how many people visit each page, where they arrived from, and how far down a page they read. This is done with Plausible Analytics, which sets no cookies, stores no IP addresses and creates no persistent identifier for you. Nothing it records can be traced back to an individual, and we could not identify you from it if we wanted to.

Plausible processes and stores this data entirely within the European Union, which is the same commitment we make about email.

Your rights

Under UK GDPR you have the right to request access to the personal data we hold about you, and the right to request its deletion. To exercise either right, contact us at the address below and we'll respond within 30 days.

Contact

This site is operated by Christopher Welsh, trading as WL Tech.
Email: info@wltech.pro