Privacy Policy

CheckMyWebsite.co.uk is operated by UKC LABS LTD, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Company number 15229367. VAT number GB476819146. We are the data controller for the personal data described here. For any privacy question, email hello@checkmywebsite.co.uk.

The service runs non-invasive checks against publicly available information for a website you submit. It reads public HTTP responses, page metadata and public files such as robots.txt and sitemap.xml. It does not log in to the target site, does not attempt to change anything on it, and is not penetration testing or a security test.

• The URL or domain you submit, and the canonical host it resolves to.
• Scan and report data: findings, scores, and the report token used to open your report.
• Technical data returned publicly by the website checked, such as status codes, response headers and page metadata.
• Operational and security logs, including a peppered one-way hash derived from your IP address for rate limiting and abuse prevention, plus error diagnostics.
• Contact and payment data needed to complete a purchase and support you: your email address if you contact us, and the purchase record (amount, VAT, currency, status, and the payment reference from our payment provider).

We do not run advertising or marketing trackers, we do not operate an analytics cookie banner, and we do not build behavioural profiles.

• Contract: to run the check you asked for, produce your report, and deliver and manage a 30-Day Domain Unlock you have bought.
• Legitimate interests: to keep the service available and secure, apply reasonable rate limits, prevent abuse, and diagnose faults.
• Legal obligation: to keep tax and accounting records for sales, including VAT records.

Card payments are processed by Stripe. Your card details are entered directly with Stripe and we never see or store card numbers. We store only the purchase record and Stripe's payment reference so we can grant, support, and where required revoke your Domain Unlock. Stripe acts as an independent payment provider and processes your payment data under its own terms and privacy notice.

We use a small number of providers to run the service: our hosting and database platform, and Stripe for payments. Providers may process data on our behalf only to deliver the service, and we do not sell or share your data for marketing. Where a provider processes data outside the UK, it does so under safeguards recognised by UK data protection law.

• Scan reports and their access tokens are retained for 30 days and are then purged by our scheduled cleanup.
• Domain Unlock records last for the 30-day unlock period, plus the period needed to handle refunds, disputes and support.
• Purchase and VAT records are kept for the period required by UK tax law.
• Operational and security log data, including rate-limit hashes, is kept only as long as needed for abuse prevention and troubleshooting.

Reports are reachable only via a long, unguessable token, sensitive detail is withheld from free reports on the server rather than merely hidden in the browser, and paid access is decided server-side. Traffic is served over HTTPS and payment card data never reaches our systems. No online service can be guaranteed completely secure, and we do not claim any security certification.

You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to our processing of it, or port it. Email hello@checkmywebsite.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

If we change this policy we will update the date at the top of this page. Material changes affecting purchases will be reflected before your next purchase.