Legal

Privacy Policy

Last updated: 13 June 2026  ·  Effective: 13 June 2026

Summary: We collect minimal data, we never sell or share it, and most of our tool runs entirely in your browser. Read on for the full details, including your rights under the UK GDPR, EU GDPR and US state privacy laws (such as the CCPA/CPRA).

1. Who We Are

websiteseoaudittools.com (the "Service") is operated by EKSTRUH LTD, a company registered in England and Wales ("we", "us", "our", "Website SEO Audit Tools"). For the purposes of the UK GDPR and EU GDPR, EKSTRUH LTD acts as the data controller for personal data processed through the Service.

For any privacy enquiry, or to exercise any of the rights described below, contact us at help@websiteseoaudittools.com or via our Contact page.

2. Information We Collect

2.1 Information You Provide

When you use our audit tool, you enter a website URL to be analysed. We do not require an account, email address, or any personal details to run an audit.

If you use our Contact form, we collect your name, email address, the website URL you provide (optional), and your message content, in order to respond to your enquiry.

2.2 Information Collected Automatically

Like most websites, our hosting and security providers automatically log certain technical information when you visit:

  • IP address (used for security and abuse-prevention purposes)
  • Browser type and version
  • Device type and operating system
  • Referring URL
  • Pages visited and approximate time spent
  • Date and time of visit

This data is used solely for security monitoring, diagnosing errors, and understanding aggregate usage patterns. It is not combined with other information to identify you personally, and we do not use it for advertising.

2.3 Data Stored Locally on Your Device

Your audit history and recent searches are saved using your browser's localStorage — this data never leaves your device and we have no access to it. You can clear it at any time via the "Clear History" button in the tool, or by clearing your browser storage. See our Cookie Policy for full details of every cookie and storage item we use.

3. Our Legal Bases for Processing (UK/EU GDPR)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

  • Legitimate interests — to operate, secure, and improve the Service, and to monitor for fraud or abuse (technical/log data, Section 2.2).
  • Contract / pre-contractual steps — to provide the audit tool and respond to enquiries you make (Section 2.1).
  • Consent — for any optional, non-essential storage or features that may require it (you can withdraw consent at any time using the cookie notice on our site or via the controls described in our Cookie Policy).
  • Legal obligation — where we must retain or disclose information to comply with applicable law.

4. How We Use Your Information

We use the information we collect to:

  • Operate, maintain, and secure the SEO audit tool
  • Respond to support, contact, or data-rights requests
  • Monitor and improve website performance, reliability and security
  • Comply with legal obligations
  • Detect and prevent fraud, abuse, or misuse of the Service

We do not use your data for targeted or cross-context behavioural advertising, and we do not sell or "share" (as that term is defined under the CCPA/CPRA) your personal information with third parties.

5. Cookies & Similar Technologies

We use a minimal set of strictly-necessary cookies and browser localStorage to operate the website. We do not use advertising, analytics, or cross-site tracking cookies. For a full breakdown of every cookie and storage item, retention periods, and how to manage your preferences, please see our Cookie Policy. A short notice is also shown when you first visit the site, in line with the UK and EU ePrivacy rules (PECR).

6. Third-Party Services

Our tool uses the following third-party services, each governed by their own privacy policies. We choose providers that align with UK/EU and US data protection standards and put appropriate safeguards in place where data is transferred internationally:

  • Anthropic Claude API — used to generate AI insights for each audit. Audit data (URL, scores, detected issues) is sent to Anthropic's API to generate recommendations. No personal data about you is included. See Anthropic's Privacy Policy.
  • Google Fonts — fonts are loaded from Google's CDN to display this website correctly. Google may log the request (e.g. IP address). See Google's Privacy Policy.
  • Cloudflare CDN — libraries used for charts and PDF generation (Chart.js, jsPDF) are loaded from Cloudflare's CDN. See Cloudflare's Privacy Policy.
  • WordPress.com Screenshot API — used to generate website preview screenshots. The URL you audit is sent to this API to fetch a screenshot. See Automattic's Privacy Policy.
  • FormSubmit — used to process and deliver messages sent via our Contact form. The information you enter (name, email, subject, message) is transmitted to FormSubmit's servers for delivery and is not stored by us beyond what's needed to respond to you. See FormSubmit's Privacy Policy.

None of these providers are permitted to use your information for their own advertising purposes in connection with this Service.

7. Data Retention

We retain server/security logs (including IP addresses) for a maximum of 30 days, after which they are automatically deleted. Contact form submissions are retained for up to 12 months to allow us to respond to follow-up enquiries, after which they are deleted or anonymised.

We do not retain individual audit results on our servers. Audit computations occur in your browser, and only anonymised, aggregated statistics (such as total audits run or average scores) may be retained for product-improvement purposes.

8. How We Share Information

We do not sell your personal information. We only disclose personal data to:

  • The third-party service providers listed in Section 6, solely to operate the Service;
  • Law enforcement or regulators, where required by law or to protect our rights, users, or the public; or
  • A successor entity in the event of a merger, acquisition, or sale of assets, subject to the same privacy commitments described here.

9. Your Rights Under UK & EU GDPR

If you are located in the UK or the European Economic Area, you have the right to:

  • Access — request a copy of personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your personal data ("right to be forgotten")
  • Restriction — request that we limit how we process your data
  • Data portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests or for direct marketing
  • Withdraw consent — where processing is based on consent, at any time and without affecting prior lawful processing

To exercise any of these rights, contact us at help@websiteseoaudittools.com. We will respond within one month, as required by law. If you are unhappy with our response, you have the right to lodge a complaint with your local data protection supervisory authority — in the UK, this is the Information Commissioner's Office (ICO); in the EU, your national data protection authority.

10. Your Privacy Rights in the United States

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive privacy law (collectively, "US Privacy Laws"), you may have additional rights regarding your personal information, including the right to:

  • Know what personal information we collect, use, and disclose, and the categories and sources of that information
  • Delete personal information we have collected from you, subject to certain exceptions
  • Correct inaccurate personal information
  • Opt out of the "sale" or "sharing" of personal information, and of targeted advertising
  • Limit the use of sensitive personal information
  • Non-discrimination for exercising any of these rights

We do not sell or share personal information (as those terms are defined under the CCPA/CPRA and similar US state laws), and we do not use personal information for cross-context behavioural advertising. We therefore do not display a "Do Not Sell or Share My Personal Information" link, as there is nothing to opt out of — but you can still exercise any of the rights above by emailing help@websiteseoaudittools.com with the subject line "US Privacy Request". We will verify your request using the information reasonably available to us (e.g. the email address you contact us from) and respond within the timeframes required by applicable law (generally 45 days, extendable once by a further 45 days).

You may also designate an authorised agent to make a request on your behalf, in accordance with applicable law. In the prior 12 months, the categories of personal information we have collected are limited to those described in Section 2 (identifiers such as name and email address if you contact us, and internet/network activity information such as IP address and browser data for security purposes), and none of this information has been sold or shared.

11. Children's Privacy

Our service is not directed at children, and we do not knowingly collect personal information from children under 16 (or under 13 in the United States, in line with COPPA). If you believe a child has provided us with personal data, please contact us at help@websiteseoaudittools.com and we will delete it promptly.

12. International Data Transfers

Our third-party service providers may be located outside the UK, EEA, or your country of residence, including in the United States. Where personal data is transferred internationally from the UK or EEA, we rely on appropriate safeguards recognised under the UK GDPR and EU GDPR, such as Standard Contractual Clauses or the UK International Data Transfer Addendum, as implemented by our service providers.

13. Security

We use reasonable technical and organisational measures — including HTTPS encryption, restricted access to systems, and the use of reputable infrastructure providers — to protect information we process. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, complaints, or requests regarding this Privacy Policy or your personal data — including UK/EU GDPR requests and US state privacy requests — please contact us: