Who we are
The data controller is Jeff Brook (trading as Visibility Score). Our website is visibility-score.com. You can contact us at [email protected].
The public paid checkout is paused while complete trader and data-controller information, retention controls and the supporting legal wording receive final review.
What data we collect
We collect the minimum data necessary to provide our service:
- Website URLs you submit for scanning. Stored to generate your report and track score changes over time.
- Email address when you send a contact request. The free scan itself does not require an email address. Public paid checkout is currently unavailable.
- Scan results generated from your submitted URL, including scores and identified issues.
What we do not collect
- We do not store page content after analysis. We fetch your publicly accessible pages, analyse them, and discard the raw content.
- We do not operate browser analytics or advertising cookies on the public scan page. Cloudflare may use strictly necessary security technology at the network edge.
- We do not collect data from any pages behind authentication or login walls.
Lawful basis for processing
Under UK GDPR and the Data Protection Act 2018, we process personal data on the following bases, matched to each activity:
- Legitimate interest — processing a submitted public URL and generating a free technical scan allows us to provide the requested diagnostic while protecting and improving the service.
- Legitimate interest — processing a contact email and message allows us to answer the request. You may object to this processing.
- Legitimate interest — we produce anonymised, aggregate statistics from scan results to improve the accuracy of our checks. This processing does not identify individuals. You have the right to object to this processing at any time (see Your Rights below).
- Consent — if you opt in to marketing communications, we rely on your consent, which you may withdraw at any time.
How we use your data
- Providing the free scan — fetching public website content, generating technical scores and showing the result.
- Answering contact requests — sending the message to the service operator and replying to the email address supplied.
- Service improvement — aggregate, anonymised statistics on scan results help us improve our checks. This data is not personal data under UK GDPR once anonymised.
We do not use your data for marketing unless you explicitly opt in. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
Automated processing
Our scanning engine produces automated readiness scores for each website submitted. These scores are structural assessments of your website's technical configuration — they do not produce legal effects or significantly affect you in a similar way. Article 22 UK GDPR (automated individual decision-making) does not apply to this processing. The scores are indicative tools, not decisions made about you as an individual.
Third-party processors
We use the following service providers to operate the current public service. Their exact controller/processor roles and international-transfer terms should be confirmed in their current contracts before paid checkout reopens:
- Cloudflare — provides DNS, HTTPS edge delivery and security services and may process request metadata such as IP address, browser information and requested URL. Cloudflare Privacy Policy.
- Resend Inc. — provides email delivery for contact requests and receives the email address and message needed to deliver them. Retention and transfer safeguards are governed by the current provider terms. Resend Privacy Policy.
- Stripe Inc. — is configured for payment processing, but the public paid checkout is currently unavailable. If payment reopens, its role and disclosures will be confirmed before an order can be placed. Stripe Privacy Policy.
We do not sell personal data or share it with third parties for their marketing purposes.
International transfers
Cloudflare and Resend may process data outside the United Kingdom. Their current contractual safeguards and transfer mechanisms are under review. You may request available information by emailing [email protected]. Paid checkout will remain paused until its payment and delivery providers have been reviewed.
Data retention
Submitted URLs and scan results are recorded in service logs and scan-history storage. A uniform automated deletion control across every store has not yet been verified. Until it is, you may request deletion by emailing [email protected], subject to any legal obligation to retain particular records. Contact messages are kept only as long as needed to answer and manage the request. This policy will be updated with verified retention periods before paid checkout reopens.
Your rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention obligations.
- Restriction — ask us to restrict how we process your data while a dispute is resolved.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interest. Where we rely on legitimate interest (anonymised analytics), you may object at any time and we will cease that processing unless we have compelling legitimate grounds that override your interests.
- Withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Automated decision-making — you have the right not to be subject to solely automated decisions that produce legal or similarly significant effects. As described above, our scores do not constitute such decisions.
- Complain to the ICO — you have the right to lodge a complaint with the Information Commissioner's Office (see Complaints below).
To exercise any of these rights, email [email protected]. We will acknowledge your request within 5 business days and respond within 30 days (or notify you if an extension is needed).
Cookies
The public scan page does not deliberately set analytics or advertising cookies. It uses browser session storage to retain temporary interface state. Cloudflare may use strictly necessary security technology at the network edge. If non-essential analytics or payment cookies are introduced, this policy and the consent controls will be updated before they are used.
Security
Public traffic is transmitted over HTTPS through Cloudflare. The application is hosted on an operator-managed system with service access controls. No claim is made here that all stored scan data is encrypted at rest. Public payment is currently unavailable.
Children
Visibility Score is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has submitted personal data to us, please contact [email protected] and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. For free scan users, material changes will be reflected in the "last updated" date at the top of this page; continued use of the Service after that date constitutes acceptance.
Complaints
If you are unhappy with how we handle your data, please email [email protected]. We will acknowledge your complaint within 5 business days and aim to resolve it within 14 business days.
If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.