Privacy policy

Who we are

This website is operated by WEBWISP LTD, a company registered in England and Wales with company number 15872526. Our registered address is 3 Saxon Court, Horton Heath, Eastleigh, England, SO50 7FG.

For anything in this policy, or to exercise any of the rights described below, email [email protected].

We are the data controller for the information described here. That means we decide why and how it is used.

What this policy covers

This policy covers information we collect through this website: when you submit a form, when you use one of the free tools, and the technical information your browser sends when you visit a page.

It does not cover the work we do for clients under a service agreement. If you are a client, the agreement you signed sets out how we handle information about your business and your customers.

It does not cover other websites we link to. Those have their own policies.

Information you give us

The audit request form, the contact form and the referral form ask for your name, your company, your website, your work email address, what your business sells, and optionally your phone number and a message. The referral form also asks for details of the person you are referring.

We use this to answer you, to prepare and send the free AI visibility audit you asked for, and to discuss whether one of our programmes fits. Our lawful basis is legitimate interests: you contacted us about a business service and you would reasonably expect a reply.

If you tell us about someone else, for example when making a referral, please make sure they are happy for you to pass their details on.

Every form also carries a hidden field that automated submissions tend to fill in and people do not. If it is filled in, we discard the submission.

Information we collect automatically

Our hosting provider records standard technical information for every request, including your IP address, the page requested, the time, and your browser's user agent. This is used to serve the site, to keep it available and to protect it from abuse. Our lawful basis is legitimate interests in keeping the service running and secure.

When you submit a form we briefly hold your IP address in memory to limit how many submissions can come from one address in a short period. It is not written to a database and is discarded when the process handling your request ends.

We do not build profiles of visitors, and no decision affecting you is made automatically.

Analytics

We use Google Analytics 4 to understand which pages are read, how people arrive and where they leave. This helps us decide what to write and what to fix.

Google Analytics sets cookies in your browser and processes your information on our behalf. We only load it if you agree to analytics cookies. If you do not agree, it is not loaded and no analytics cookies are set.

We have configured Google Analytics to collect no more than we need for that purpose. It is not used to identify you personally and we do not combine it with information you give us through a form.

Our lawful basis for analytics is your consent. You can withdraw it at any time using the cookie settings on this site, and doing so is as easy as giving it.

Cookies and local storage

A cookie is a small file a website asks your browser to keep. Local storage is a similar mechanism that stores information in your browser without sending it back to us.

Strictly necessary: we store your cookie choice in your browser's local storage so we do not ask you again on every page. This does not require consent because the site cannot honour your choice without it.

Analytics: Google Analytics sets cookies, typically named _ga and _ga_ followed by a property identifier, which distinguish one browser from another and group requests into a visit. These are only set if you agree.

The free tools on this site do their work entirely in your browser. Nothing you drop into the image compressor or the favicon generator is uploaded to us or to anyone else, and none of it is stored. Some tools remember a setting in your browser's local storage so it is still there next time.

The font pairing tool loads typefaces from Google Fonts when you select them. Doing so tells Google that a request came from your browser. If you would rather that did not happen, do not use that tool.

You can clear or block cookies in your browser settings. Blocking the strictly necessary storage will mean the cookie notice reappears.

Who we share information with

We do not sell your information and we do not share it for anyone else's marketing.

We use a small number of suppliers who process information on our instructions. Cloudflare hosts this website and serves it. Resend delivers the emails our forms generate, including the copy sent to you. Google provides the analytics described above, if you agree to it.

Each of these is bound by a contract that limits them to acting on our instructions. We share what they need to do their job and no more.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Where your information is held

Our suppliers are based in, or operate infrastructure in, the United Kingdom, the European Economic Area and the United States.

Where information is transferred outside the UK, we rely on the safeguards the law provides for such transfers, such as the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or a data bridge where one is in place.

You can ask us for details of the safeguard that applies to a particular supplier.

How long we keep it

Enquiries and audit requests that do not become client work: two years from the last contact, after which we delete them.

Enquiries that become client work: kept for the duration of the engagement and then in line with the retention period in the service agreement, plus any period we are required to keep records for tax or legal purposes.

Analytics: Google Analytics keeps event-level data for two months and user-level data for fourteen months from a browser's most recent visit, after which it is deleted automatically. Aggregated reports, which do not identify individual browsers, are not subject to these limits.

Server logs held by our hosting provider are kept for their standard period and then discarded.

Your rights

Under UK data protection law you have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, and to have it deleted.

You can also ask us to restrict how we use it, object to our using it on the basis of legitimate interests, and ask us to transfer it to someone else in a portable form where that applies.

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.

Email [email protected] and we will respond within one month. We may ask you to confirm who you are before we act, so that we do not disclose your information to someone else.

There is no charge for any of this unless a request is excessive or repetitive, in which case we will tell you before doing anything.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. You do not have to come to us first.

Changes to this policy

If we change how we handle information, we will update this page and change the date at the top.

If a change is significant, and we hold your contact details because you asked us to get in touch, we will tell you directly.