Your privacy, in plain English.

Who we are

rebootd. is the trading name of Rebootd Limited, a company registered in England and Wales under company number 17451364. Our registered office is 1 Court Gardens, Batheaston, Bath, BA1 7PH. For anything in this policy, we are the data controller for the personal data described here.

You can contact us about your data at hello@rebootd.co.uk.

What this policy covers

This policy applies to the rebootd.co.uk website and to the audit, brand direction, and website build services we provide. It sits alongside our Terms of service.

What we collect

When you use the contact form: your name, email address, and the message you send.

When you order or start an audit: the website address you enter, your email address, and the town and country you are targeting.

When you start a build: your business name and sector, your location, your answers to the questionnaire, your email address, and your existing website address if you have one.

When you pay: your payment is processed by Stripe. We receive confirmation of payment and limited billing details. We do not see or store your full card number.

When you browse: standard analytics data such as pages viewed, approximate location, device and browser type, and a cookie identifier, collected through Google Analytics.

Why we use it, and our lawful bases

To provide the audit, brand direction, and build you have asked for, and to take payment. Lawful basis: performance of a contract.

To respond to enquiries, run and secure the website, and improve our service. Lawful basis: our legitimate interests in operating and improving the business.

To measure website usage and our advertising through cookies. Lawful basis: your consent, which you can withdraw at any time.

To meet our accounting and tax obligations. Lawful basis: legal obligation.

Who we share it with

We use trusted service providers who process data on our instructions: Vercel (website hosting), Supabase (database), Stripe (payments), Resend (transactional email), Cloudflare (DNS and security), Google Analytics (website analytics), Meta (advertising measurement), DataForSEO (keyword and ranking data used in audits), Google PageSpeed Insights (page performance data used in audits), Browserless (reading the public pages of the site you ask us to audit), and Anthropic (AI processing of your questionnaire answers and site content to generate your brand direction and audit). We do not sell your personal data to anyone.

Sentry (error reporting, EU servers). When something goes wrong on the site we record the error, the page it happened on and, if you were signed in, your email address, so we can fix it and let you know.

Where your data is processed

Some of these providers process data outside the UK and the European Economic Area. Where they do, we rely on an adequacy decision or on standard contractual clauses so that your data keeps a comparable level of protection.

How long we keep it

We keep enquiry and audit records for up to 24 months unless you go on to become a customer. Records connected to a paid build and our financial records are kept for 6 years to meet UK accounting requirements. Analytics data is retained for the period set in Google Analytics. We delete or anonymise data when we no longer need it.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, to ask us to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email hello@rebootd.co.uk and we will respond within one month.

Cookies, analytics and advertising

We do not set analytics cookies until you accept them using our cookie banner. If you accept, Google Analytics sets the following cookies: _ga, which lasts up to 2 years, and _ga_ followed by a container id, which also lasts up to 2 years. These help us count visits and understand how the site is used. You can withdraw consent at any time using the Cookie settings link in the footer, or by clearing cookies in your browser. If you reject, no analytics cookies are set.

If you accept, the Meta pixel sets two cookies, _fbp and _fbc, which each last up to 90 days. They tell Meta Platforms Ireland Limited which pages you viewed and whether you sent us an enquiry, so we can measure our adverts on Facebook and Instagram and show them to relevant people. We do not send Meta your name, email address or anything you type into our forms.

We use Google Analytics to understand how the site is used. It sets cookies that collect usage and device data. You can refuse or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed.

Contact

For any question about this policy or your data, email hello@rebootd.co.uk or write to us at Rebootd Limited, 1 Court Gardens, Batheaston, Bath, BA1 7PH.