What we do withyour details.

What we collect, and when

We have tried to list this by the thing you actually did, rather than by category, because that is how you will remember it.

If you use the free Visibility Checker

• Your business name and postcode. These go to Google's Places API so we can find your listing. We cannot look you up without them.
• Your email address, but only if you choose to give it to see the full fault list. The checker works and shows you a score without one.
• The result — your score, what we found on your Google profile, and the faults we identified.

If you use the free domain finder

• The business name, town and trade you type in. These go to our domain registrar to check what is available.

If you fill in the contact form

• Your name, business name, email address, phone number if you give one, and what you wrote. All of it reaches a person. That is the point of it.

If you buy something

Payment is handled by Stripe. We never see or store your card number. Stripe passes us your name, email address, billing address, and — on the monthly packages — your phone number and the business name, postcode and trade you typed at checkout, so we can actually do the work.

Everyone who visits

• Our hosting keeps your IP address briefly to stop the free tools being abused. It is stored against a counter, not against you, and it ages out.
• If you arrive on a link from a social post, the campaign name in that link is kept for the length of your visit so we know which post worked.

Why we hold it, and our lawful basis

• Checker and domain lookups — to give you the answer you asked for. Lawful basis: legitimate interests, because you asked us to look.
• Your email and the fault list — to send you the detail and to follow up. Lawful basis: consent, which one click withdraws.
• Purchase details — to deliver what you paid for. Lawful basis: performance of a contract.
• Invoices and payment records — because tax law requires it. Lawful basis: legal obligation.
• Abuse counters — to keep the free tools usable for everybody. Lawful basis: legitimate interests.

Who else sees it

These are our suppliers. Each processes data on our instructions only and cannot use it for their own purposes.

• Stripe — payments. They are the ones handling your card, not us.
• Cloudflare — hosting and the database this site runs on.
• Google — the Places API, to find your Google Business Profile.
• Serper — a separate company, not Google. We ask it whether your business appears in Google's own search results. Your business name and postcode are what we send; nothing else goes, and nothing comes back about you beyond whether you showed up.
• HubSpot — our customer records.
• Resend — the emails we send you, and the alert that tells us you got in touch.
• Openprovider — domain availability and registration.
• Nominet, Verisign and rdap.org — the public domain registries. When you check whether a web address is free, that address is what we ask them about. Nothing about you goes with it: they are told the domain, not who is looking.
• Anthropic — the two-sentence summary at the end of your free check is written by Claude, Anthropic's AI. Your business name, trade and postcode go with it, along with the score and what we found, so that it can say something specific rather than generic. It is one request and nothing comes back to us except those two sentences, which we show you and do not store.

Some of these are outside the UK. Where they are, the transfer is covered by the UK's approved safeguards — either an adequacy decision or the International Data Transfer Addendum.

How long we keep it

• Checker results — cached for up to thirty days, then re-taken fresh.
• Leads and enquiries — while there is a live conversation, and for two years after the last contact.
• Customer records — for as long as you are a customer.
• Invoices and payment records — six years after the end of the financial year they fall in, because HMRC requires it. This is the one thing we cannot delete on request, and we would rather say so than be vague.

What you can ask us to do

You have the right to ask for a copy of what we hold, to have it corrected, to have it deleted, to restrict what we do with it, to object to us holding it, and to have it handed to you or to someone else in a portable form.

Email hello@wincustomers.co.uk. It costs you nothing and we will answer within a month.

You also have the right to complain to the Information Commissioner's Office — ico.org.uk, or 0303 123 1113.

Marketing

If you tick the box asking for tips, we will email you occasionally. Every one of those has an unsubscribe link that works, and one click is the end of it. We do not pass your address to anyone else, ever.

Cookies and analytics

We ask before we count you, and nothing happens if you say no.

We use Google Analytics 4 to count visits and see which pages are worth keeping. It sets two cookies, `_ga` and `_ga_PKGFH3ZQ98`, which hold a random number that lets Google tell a repeat visit from a new one. They last up to two years.

Neither is set unless you press "Yes, count me" on the bar at the bottom of the page. Nothing is fetched from Google until you do. If you press "No thanks", nothing is loaded, nothing is stored beyond your answer, and you will not be asked again.

We have switched off Google's advertising features and turned on IP anonymisation, so the data cannot be used to build an advertising profile of you and we never see your full address.

Changed your mind, either way? Ask me again and the bar comes back.

The lawful basis is consent, under regulation 6 of the Privacy and Electronic Communications Regulations. We are not claiming these cookies are strictly necessary, because they are not — the site works identically without them.

Two other things your browser stores, neither of which is analytics and neither of which needs consent: your theme preference, and the campaign name from a link you arrived on, kept for the length of that visit only. Both stay on your device and never reach us as a cookie.

No advertising cookies, and no cross-site tracking, either way.

Changes

If this notice changes we will date the change here. We will not change it quietly.