Privacy policy

Who is responsible for your information

Richard Summerfield, trading as SiteCheckMate.com, is the controller of personal information used to prepare and provide our website reports and handle customer enquiries. Our business address and support email are below.

Information we use and where it comes from

• Contact and report details: your email address, business name, website address, assigned reports, review notes, and correspondence you send us.
• Public website information: pages, links, publicly displayed business contact details and evidence such as screenshots. We may collect these from your business website and public business listings while preparing a review. Public information can still be personal information.
• Sign-in and security information: hashed login codes and session identifiers, expiry times, attempt counts, and a hashed IP address used to limit requests. Our hosting and email providers also process technical and delivery logs.
• Order information: the report purchased, purchaser email, amount, currency, payment status and Stripe transaction references. Payment details are entered into Stripe’s checkout. Our report application does not store your full card number or security code.

Please do not send passwords, payment card details or sensitive customer information in a support message. We do not need access to your store’s customer accounts to review public pages.

Why we use this information

• Provide your report and support: assign access, send requested sign-in codes, process purchases and answer enquiries. We rely on performing a contract or taking steps you request before a contract where applicable; for staff acting for a business customer, our legitimate interest is providing that business with its requested service.
• Prepare website reviews: inspect public business websites and keep evidence of relevant findings. Our legitimate interest is offering useful, evidenced website reports to businesses, balanced against the rights of the people whose information appears.
• Protect the service: prevent unauthorised report access, abuse and payment fraud, and investigate errors. Our legitimate interest is operating a reliable and secure service.
• Meet legal requirements: keep necessary accounting records, respond to lawful requests and handle disputes.

Report invitations and your right to object

We may use public business contact details to offer a relevant website report where the applicable marketing rules permit it. The fact that an address is public does not, by itself, give permission to email it. Consent will be needed where the relevant rules require it.

You can object to direct marketing at any time. Reply to a message or email support@sitecheckmate.com and ask us to stop. We will stop marketing to that address and keep only the suppression information needed to respect your request. Requested login codes, purchase messages and replies to your support enquiries serve a different purpose.

Who helps us provide the service

We share only the information needed with providers that help operate the service:

• OpenAI’s Sites platform and Cloudflare for website hosting, report storage, delivery, security and owner authentication.
• Resend and its delivery providers for transactional emails and email delivery records.
• Stripe for checkout, payment processing, fraud checks and payment records. Stripe also has its own responsibilities for some payment-related data; see Stripe’s privacy policy.
• Unlimited Web Hosting for the support email address and Google’s email service for the inbox to which support messages are forwarded.
• Professional advisers or authorities when necessary to meet legal obligations or handle a dispute.

We do not sell personal information. Reports are made available to the email address assigned to them, and you may share your purchased report with your website maintainer.

Processing outside the UK

Our hosting, payment and email providers operate internationally, so information may be processed outside the UK. The countries and transfer arrangements depend on the provider and service. Contact us for information about the relevant processing locations and applicable safeguards, such as adequacy arrangements or approved contractual terms. We do not promise that all data stays in the UK.

Cookies and browser storage

The report portal uses the necessary sitecheck_session cookie to keep you signed in. It normally expires after 24 hours and is cleared when you sign out. A sign-in code is valid for 10 minutes and can be used once. The browser also temporarily remembers the selected report in session storage to return you to the right report after checkout.

Hosting, owner sign-in and Stripe checkout may use their own necessary security storage. The application does not add advertising cookies or a marketing analytics tracker. Our site loads fonts from Google Fonts, which involves your browser contacting Google and sharing technical request information such as your IP address. Blocking necessary storage may prevent login or checkout from working.

How long information is kept

We keep reports and customer access records for as long as needed to provide purchased access, answer support requests and handle disputes. Accounting and payment records are retained for the applicable legal record-keeping period. Security records are kept as needed to investigate and prevent misuse; a code or session expiring prevents its use but does not necessarily delete the associated database record immediately.

Public prospect details and unpublished reviews are retained only while relevant to a potential report or a legitimate follow-up. Suppression records may need to be kept longer so we do not contact someone who has objected. We consider the purpose, age, sensitivity, legal requirements and any outstanding dispute when reviewing retention or a deletion request.

Your rights and complaints

Depending on the circumstances, you can request access, correction, deletion or restriction of your personal information, object to processing, and request a portable copy where that right applies. Where processing relies on consent, you can withdraw it. We may need to verify your identity, and some information may need to be retained for legal reasons.

Contact support@sitecheckmate.com with a privacy request or concern. You can complain to the UK Information Commissioner’s Office at ico.org.uk, or an applicable local data protection authority. We do not make decisions about people with legal or similarly significant effects solely by automated processing.

Changes to this notice

We will update this page when our processing changes. The effective date appears above; material changes will be explained where appropriate.

Contact us