Privacy Policy

We collect the following categories of personal data:

• Account information — your email address and, if you create an account, your password (stored in encrypted form).
• Audit data — the website URLs you submit for auditing, and the reports generated from them.
• Payment information — when you subscribe, payment is processed by our third-party payment provider. We do not store your full card details on our servers.
• Technical data — your IP address, browser type, and basic usage information collected automatically when you use the Service.
• Communications — any information you provide when you contact us.

We use your personal data to:

• Provide, operate, and maintain the Service, including generating and delivering audit reports.
• Process your subscription, payments, and manage your account.
• Send you service-related communications, including email verification and report delivery.
• Prevent abuse, fraud, and misuse of the Service.
• Improve and develop the Service.
• Comply with our legal obligations.

Under UK GDPR, we rely on the following legal bases:

• Contract — to provide the Service you have signed up for.
• Legitimate interests — to operate, secure, and improve the Service, and to prevent abuse.
• Consent — where you have given it, for example for certain communications.
• Legal obligation — where we are required to process data by law.

We do not sell your personal data. We share it only with trusted third-party providers who help us operate the Service — for example, payment processing, email delivery, and hosting infrastructure. These providers process your data only on our instructions and under appropriate data protection terms.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, property, or safety of our users or others.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [CONTACT EMAIL]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies to operate the Service, such as keeping you logged in and maintaining your session. We also collect basic, privacy-respecting usage information to understand how the Service is used. We do not use third-party advertising cookies.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Passwords are stored in encrypted form, and access to personal data is restricted. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Some of our service providers may process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision, as required by UK GDPR.

The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Significant changes will be communicated to you where appropriate.

If you have any questions about this Privacy Policy or how we handle your data, contact us at [CONTACT EMAIL].

[COMPANY NAME]
Leicester, United Kingdom