Privacy Policy

Last updated: 2026-07-26

Sitewren, operating from Pakistan, is the data controller for Sitewren. This policy explains what personal data we process and your rights under the UK GDPR and EU GDPR.

What we collect

Account data: your email address and a bcrypt hash of your password.
Project data: the website URL you submit for auditing.
Order data: the package purchased and a payment-provider reference. We never see or store your card details.
Technical data: IP address and user-agent, used for security and rate limiting.
Free-audit leads: if you request a free preview, the email address and URL you submitted.

How we use it

To run audits and deliver reports to your dashboard.
To send transactional email (receipts, audit-ready notices, blocked-audit notices).
To prevent abuse, enforce rate limits, and secure the Service.

Legal bases

Performance of a contract (providing the Service), legitimate interests (security and abuse prevention), legal obligation (tax and accounting records), and consent where required.

Payments

Merchant of Record. When you buy a package, our authorised payment provider is the Merchant of Record and the seller of record for that transaction. That name — not Sitewren — is what appears on your card statement and on the invoice you receive. Sitewren provides the audit service itself.

The Merchant of Record is an independent controller for the payment data you give it at checkout — including your card details, billing address and tax status. That data is collected by the provider on its own checkout, never by us. We receive only the package purchased, the amount paid, a transaction reference and your email address.

Sub-processors

We share personal data only with the processors below, each under a data-processing agreement, and only as needed to run the Service:

Resend — Transactional email delivery (verification, receipts, audit notices).
Sentry — Application error monitoring and crash diagnostics.
Cloudflare — DNS and CDN in front of our websites.
Hetzner — Server hosting.
Our authorised payment provider (Merchant of Record) — payment processing, invoicing, tax collection and refunds.

Separately, running an audit sends only the website URL you asked us to audit — never your account details or any other personal data — to a third-party SEO data provider and to a third-party performance-measurement service. Those services receive no personal data, so they are not sub-processors of your personal data.

Some of these providers process data outside the UK and EEA. Those transfers rely on Standard Contractual Clauses or an equivalent safeguard in the provider's terms.

Retention

We keep account and report data while your account exists, and order records for as long as tax and accounting law requires. Free-audit lead records are kept so we can enforce the one-preview-per-email limit; alongside the address you gave us we store a normalised form of it — lower-cased, with any +tag removed — purely so that limit cannot be sidestepped by re-typing the same mailbox a different way. It is never used to contact you.

You can delete your account yourself at any time from Dashboard → Settings, or ask us to. What that does, and the one category of record it deliberately keeps, is set out under “Your rights” and “What deletion keeps, and why” below.

Your rights

You may access, correct, export or delete your data, withdraw consent, and object to processing. Two of those you can do yourself, immediately, from Dashboard → Settings:

Export my data downloads a JSON file containing everything we hold that identifies you: your profile, your website, every audit with its scores and status, your orders and your entitlements. Full audit reports are not in the file because they are large — each one is separately downloadable as a PDF from the reports page.
Delete my account erases your personal data. You are asked for your password first, because it cannot be undone. It removes your email address, your website, and every audit and report we hold for you, including the report files on disk. Your sessions are revoked and you can no longer sign in.

Prefer not to use the dashboard, or need something the buttons do not cover — correction, objection, or restriction of processing? Email hello@sitewren.co.uk and we will respond within one month. You also have the right to complain to your local data-protection authority.

What deletion keeps, and why

Records of what you paid are retained after deletion. We are required to keep transaction records for accounting and tax purposes, and data-protection law explicitly permits retention where another legal obligation requires it. So an order row survives with its package, amount, currency and dates.

What it does not survive with is you. The account it points at has had its email address replaced with an irreversible placeholder that can never receive mail, so the record shows that a purchase happened without identifying who made it. There is no way for us to reverse that, which is the point: it is erasure of the person, not of the bookkeeping.

This matches the coverage rules in our Terms of Service. Deleting your account ends any remaining coverage — it does not entitle you to a refund of it, and it does not remove a refund you are already owed. If you want money back as well as erasure, ask for the refund first: see the Refund Policy.

Cookies

We use a small number of strictly necessary cookies, listed in our Cookie Policy.