Privacy policy

Who is responsible

Alex Player, trading as Nexus Websites operates GDPRFix and is responsible for the personal information described here. Contact: hello@gdprfix.org. Address: 18 Lower Marsh Lane, London, KT1 3FE.

Information you provide

We process submitted public website addresses, account email addresses, scan requests, report-sharing choices, answers to owner questionnaires and remediation scope requests. Do not put passwords or sensitive personal information in scan URLs, questionnaires or general notes. Temporary website access may be supplied only through the dedicated access form after payment. Account email is needed for email sign-in; a public website address is needed to run a scan.

Privacy workspace records and team access

The privacy desk stores customer-authored processing records, minimal case summaries, supplier and framework notes, target dates and activity events. Record content is encrypted at rest using our application encryption. The workspace owner controls invitations and roles; invited viewers may read and export records, and editors may update them. These permissions do not share website credentials or billing. We process this content to provide the requested workspace service; the customer remains responsible for the information they choose to record and their authority to share it. Keep sensitive case documents, health information and payment-card data out of the workspace. Records remain while the account is active; archiving is reversible and does not erase data. Export records or request account deletion through Account & privacy. Optional record reminders go to the workspace owner and omit case content. Invitations expire after seven days.

Optional promotional emails

You can choose to receive GDPRFix privacy tips, product news and offers by email from Alex Player trading as Nexus Websites. The signup checkbox starts unticked and is separate from the terms. Free scans do not depend on marketing consent. For new accounts, we activate your choice only after you verify your email. We record your choice, its wording and version, date and source. Existing members manage their choice in Account settings; signing in again does not resubscribe you. Withdraw consent at any time in Account settings or by emailing hello@gdprfix.org. We use consent for these promotional emails; essential account messages are separate. We keep a minimal record of consent and withdrawal to demonstrate and respect your choice.

Contact form messages

The contact form collects your name, reply email, topic and message and sends the enquiry to hello@gdprfix.org. We use it to respond, not to add you to a marketing list. Messages waiting for delivery are encrypted in our mail queue and retried for up to 24 hours; their queued content is removed after provider acceptance or expiry. The delivered enquiry remains in our business mailbox so we can handle your request. Please do not send passwords, card details or unnecessary sensitive information.

Preventing spam and excessive requests

Guests can start one scan every ten minutes per IP address. After signing in with an email verification link, free account holders can start three scans in any rolling ten-minute period per account. Contact messages remain limited to one every two minutes per IP address. Guests sharing an internet connection share the guest limit. We store recent scan allowance timestamps against an account ID to enforce the account limit. We store a keyed hash of the IP address and the next permitted submission time; the cooldown record does not contain the raw IP address. Expired cooldown records are cleared by our background worker after 24 hours. A further shared-IP limit allows at most six FREE scans in ten minutes, with a limit on simultaneous scans. Deleting a scan does not reset these allowances. FREE scans and contact messages require Google reCAPTCHA where configured; it loads only when you select the security check. We can block abusive connections. Administrator-entered blocked IP addresses are encrypted, accessible only in the private admin area, and removed after their selected block period expires. These records support service security and do not identify you for advertising.

Optional website analytics

If you accept analytics cookies, Google Analytics measures visits to our public information pages to help us improve content and understand discovery sources. We use consent as the lawful basis. It receives a pseudonymous browser identifier and device/visit information; Google processes network information to provide the service. We do not send account email, scan URLs, private report identifiers, form content or URL query strings. Advertising personalisation and Google signals are disabled in our tag. Google Analytics user-level and event-level retention is set to two months without resetting on new activity; aggregate reports are not subject to that same limit. We exclude account, admin, fixing-workspace and individual report pages. After a successful enquiry, consented analytics may record a generate_lead event containing only the enquiry category and public page name. We keep the submitted enquiry in our private admin inbox and can record its qualification, campaign source and linked paid project. Only fixed campaign labels are captured; we do not collect Google advertising click IDs or send contact details or message contents to Google. You can reject or withdraw consent using Cookie settings at the bottom of any page.

Google privacy notice ↗

Contact form security check

Where enabled, the contact form uses Google reCAPTCHA to help prevent automated spam. Google is contacted only after you select Load security check. The check can send Google your IP address, browser and device information, and information about your interaction with the check, and can use cookies. Our server sends the resulting verification token to Google to confirm the check. Your name, email and message are not included in that verification request. If you prefer not to load the check, you can email us directly. Google explains its processing in its privacy notice and terms.

Google privacy notice ↗ · Google terms ↗

Website-fixing records

We store your request, authority confirmation, page count, platform, answers, proposed scope, approval, payment status, preparation details, work date, completion report and sign-off. Fix orders retain snapshots of relevant scan findings and retest findings so they remain understandable after a normal scan expires. Temporary access details are encrypted separately and visible only to the owning account and authorised operators. Access viewing is logged without recording the secret. Stored access expires after seven days and is removed at completion, cancellation or your request. This does not revoke an account on your website: you must remove that temporary access there too. We retain order and payment records for handling the service, accounting and resolving disputes. Access credentials have the shorter expiry described above and are not kept as part of the payment record.

Country and currency

Where supported by our hosting provider, we use its IP-derived country code to suggest a display currency. You can change the currency manually. Reference exchange rates are fetched by our server from Frankfurter; that rate request does not send your IP address or account details. Converted website prices are estimates. Stripe handles checkout currency, payment details and its own exchange rates under its privacy notice.

Stripe privacy notice ↗

Information from scans

The scanner visits public pages and records page addresses, titles, text excerpts, technology and storage names, storage activity, network destinations, selected consent controls, timestamps and screenshots. Public page content may include personal information about people who did not request the scan. Cookie values are excluded, URL query values are redacted and input fields are masked in screenshots. These precautions cannot remove every piece of personal information from a public page.

Why we use information

We use the information to deliver requested scans and reports, maintain account access, prevent abuse, investigate faults and handle enquiries and privacy requests. We rely on contract or steps you request before a contract for accounts, scans and paid services; legitimate interests for responding to enquiries, protecting the service and proportionate assessment of public website behaviour; and legal obligations for required business records. Optional analytics and opted-in promotional email use consent. Our legitimate interests are running a secure service and helping website owners identify technical problems. You can object to processing based on legitimate interests.

Storage and retention

Reports expire 30 days after creation. An active worker removes expired scan records and evidence; access checks reject expired reports. Sign-in links expire after 15 minutes, account sessions after seven days and guest-report cookies after 30 days. The worker also clears rate-limit records older than 24 hours. Accounts remain while you use the service or until an erasure request is handled. We review support, complaint and operational records when the matter closes and remove information no longer needed, subject to legal obligations or ongoing disputes. Financial records may need to be retained for statutory accounting periods. Backup copies are separated from the live service and expire through backup rotation; deleting a live record does not instantly remove every backup. Contact us for the retention decision applying to your record.

Who can access information

Reports require the owning guest browser or account, unless the owner enables link sharing. Anyone holding an enabled sharing link can view that report and its evidence, so treat it as confidential. Authorised operators may access records to run and support the service. Our application, database and scan evidence run on a Hostinger VPS in Manchester, UK. Hostinger also provides our business mailbox. Resend delivers account and enquiry emails; Stripe handles hosted payments, so we do not receive full card details. Google provides optional Analytics and the on-demand reCAPTCHA security check. These suppliers may process information outside the UK. Their applicable data-processing terms describe locations and transfer mechanisms, including contractual safeguards where required. Ask us for information about a particular supplier or transfer.

Sign-in email records

Sign-in messages are queued for delivery through Resend. The queued message content is encrypted and has a 15-minute expiry. The worker clears that content after the provider accepts the message or after expiry; recipient and delivery-status records remain. A queued message or provider acceptance does not prove arrival in your inbox. Development mailbox previews are local and do not represent an email sent to you.

Accounts and deletion

Signed-in users can use Account & privacy to export account information, review sessions and request account deletion. A deletion request is saved for operator review; it does not immediately erase the account or evidence. You can cancel a pending request. We may need to clarify scope or retain information where there is a lawful reason, and will explain the outcome. If you cannot sign in or the information concerns a public scan about you, email hello@gdprfix.org.

Open Account & privacy ↗

Your choices and rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Rights are not absolute. You can withdraw consent for analytics using Cookie settings and for promotional email using Account settings or by contacting us, without affecting earlier lawful processing. Use the contact details on the Contact page to make a request. We may need proportionate identity checks. You can also raise a data-protection complaint with us and complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

Your right to object

You can object to processing based on legitimate interests, including public-page assessment involving your personal information. Email hello@gdprfix.org, identify the relevant page or report and explain your concern. We will assess the request and any grounds for continued processing; this right is not limited to account holders.

Automated decisions and AI

Versioned technical rules generate scan findings. The current product does not send scan evidence to a generative AI service, provide an AI chatbot or make decisions with legal or similarly significant effects about individuals. A report is a technical observation, not a regulatory decision.

Changes to this notice

We update this notice when our processing or suppliers change. The date above identifies this version. We will bring material changes to your attention where appropriate.