Privacy notice

Who we are

Refettle (“we”) operates refettle.co.uk. We are the data controller for the personal data described here. Contact us at hello@refettle.co.uk.

What we collect, and why

Only what you give us through one of the three forms on this site:

• Free site audit — your website address, name, email, and optionally your organisation, phone number and a description of the problem.
• Contact — your name, email, optionally your organisation, and your message.
• Refettle for Good — your organisation name and registration number, current website, your name, email and your application.

We also record the IP address a submission came from. That is used solely to rate-limit the forms so they cannot be abused by bots.

What happens when you request a site audit

Asking for a free audit is an instruction to go and look at the website address you gave us, so that is what we do. Our audit tool visits that site the way a browser would and records what it finds: how fast the pages load, what the site is built on, which components and versions are in use, and which security headers are set. We only ever make ordinary read requests. We never attempt to log in, submit anything, or test for vulnerabilities.

To produce the report we send some of that publicly available information to the processors listed below — the address you gave us, page titles and headings, and short extracts of page text. We strip email addresses and phone numbers out of those extracts first, and we never send your name, your email address or your phone number.

If the website is not yours to have examined, please do not submit it.

Our lawful basis

Legitimate interests (UK GDPR Article 6(1)(f)) — responding to an enquiry you deliberately sent us, and keeping our forms working. Where an enquiry becomes a project, we process your data to perform that contract.

How long we keep it

Enquiries that do not become projects are deleted after 24 months. Records relating to work we have carried out are kept for seven years, because HMRC requires it.

Audit reports and the data collected to produce them are kept for 12 months so we can answer questions about a report we sent you, then deleted. Ask us sooner and we will delete it sooner.

Who processes data on our behalf

A short list, and it is the whole list. We do not sell personal data, we do not share it with advertisers, and there are no third-party trackers on this site.

• Our email provider — carries your message to us and our reply to you.
• Google — when you request a site audit, we ask Google’s PageSpeed Insights and Chrome UX Report services for performance data about the address you gave us. That address is the only thing sent.
• OpenAI — helps us interpret the pages found during an audit and draft the written parts of the report. Under OpenAI’s API terms, what we send is processed on their servers in the United States and is kept for up to 30 days so OpenAI can check for misuse, then deleted. It is not used to train their models.

Each of these acts on our instructions, and none of them may use what we send to train models or to build a profile of you.

Where it is stored

Your enquiry is stored on our own servers in the United Kingdom, and in our email system. Two things leave that area, both only as part of an audit: the website address you gave us, sent to Google, and short extracts of that site’s public pages, sent to OpenAI. Both are processed in the United States. Those transfers are covered by the standard contractual clauses and the UK International Data Transfer Addendum in each provider’s data processing agreement. Nothing else — your name, email, phone number or message — leaves the United Kingdom or European Economic Area.

Cookies and analytics

This site sets no advertising or tracking cookies. We use privacy-first analytics that counts page views without cookies, without fingerprinting and without collecting anything that could identify you personally.

Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to us processing it. Email hello@refettle.co.uk and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change this notice we will update the date at the top. Material changes will be flagged on the homepage.