How we handle your data

Last updated: 28 April 2026

When you use the ProMedia66 SEO audit tool, here's exactly what we collect, how long we keep it, and your rights over it. We've tried to write this in plain English — no dark patterns, no hedge phrases. If anything's unclear, email us and we'll fix the policy.

What we collect

From the quick scan (no email required):

The URL you submitted, and the public information our tool finds at that URL.
A non-reversible hash of your IP address (used only to prevent abuse — it's deleted with the audit).
Your browser's user agent string (used for the same purpose).

From the deep audit (email-gated):

Your email address, after you confirm it via the double opt-in link.
The hostnames you've audited (used to tag your subscription so we can send relevant follow-ups).
UTM parameters from the link that brought you to the tool, if present.

How long we keep it

Audit data — every URL audited, every check result, every PDF — is automatically deleted from our systems 14 days after the audit was created. This is enforced by a scheduled job that runs hourly. There's no manual step.

Your email subscription persists separately. We keep that until you unsubscribe. Every email we send includes a one-click unsubscribe link.

Who we share it with

We use a small set of service providers:

Supabase (database and PDF storage) — EU-hosted.
Netlify (hosting) — EU/US-hosted.
Resend (transactional email).
Cloudflare Turnstile (bot protection).
Google PageSpeed Insights (we send the URL you audited to fetch performance metrics).
Anthropic (we send your audit findings to generate personalised recommendations — never your email).
A mailing list provider (e.g. Mailchimp) for managing email subscriptions.

We don't sell your data, share it with advertisers, or use it for behavioural ad targeting.

Lawful basis (UK GDPR / EU GDPR)

For audits without email: legitimate interest in providing the requested service.
For email subscription: explicit consent via double opt-in.
For abuse prevention (rate limiting, bot detection): legitimate interest.

Your rights

You can request a copy of any data we hold about you, ask us to correct it, or ask us to delete it. Email us via the address on the main ProMedia66 site and we'll respond within 30 days.

If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO).

Changes to this policy

If we change anything material, we'll post the change here and date it. We won't start using your data for new purposes without telling you first.