Privacy Policy

Last updated: 1 July 2026

1. Who we are

Weakspot is a trading name of Harewood Digital Limited (company no. 11896620), registered office [REGISTERED OFFICE ADDRESS], Harrogate, United Kingdom. We are the controller of the personal data described here. Contact: hello@weakspot.co.uk.

2. What we collect

• Account data: your email address and sign-in activity when you create a Weakspot account.
• Billing data: handled by Stripe, our payment provider; we do not store card numbers.
• Usage data: searches run, leads saved and feature use, to operate credits, claims and improve the Service.
• Free audit data: if you use our free website check, the website address you enter and its audit results; and if you request the full report, the email address you provide.
• Audited-business directory: audit results (address, scores, issues) for business websites, derived from those sites' public pages and Google PageSpeed data.

3. How we use it, and our lawful bases

• To provide the Service and take payment, performance of a contract.
• To email you a requested audit report and related follow-ups about your site, consent, given when you submit your email; you can withdraw it anytime via the unsubscribe link or by contacting us.
• To maintain the audited-business directory of UK business websites, which our agency customers use to identify businesses that may benefit from web services, our legitimate interests in operating a business-to-business lead-intelligence service. This directory holds business-level information about websites; we do not sell or share with customers the personal email addresses submitted through the free check.
• To connect you with a provider, but only if you explicitly request it. If you use the "request a call" option after a free check, we pass your name, phone number, email address and your site's report to a web professional who uses Weakspot so they can contact you about the work, consent, which you can withdraw at any time. We do not vet, recommend or endorse providers, and any work is agreed directly between you and them.
• To secure and improve the Service, our legitimate interests.

4. Sharing

We use service providers to run Weakspot: hosting (DigitalOcean), payments (Stripe), and email delivery. They process data on our instructions. Weakspot subscribers can see business-level audit data (websites, scores, issues, publicly listed business contact details); they cannot see free-check submitters' email addresses. The one exception is when you explicitly request a call through the free check: then your name, phone number, email address and report are passed to one provider so they can contact you. We do not sell personal data.

5. Retention

Account data is kept while your account is active and for a short period after closure. Free-check emails are kept until you unsubscribe or ask us to delete them. Directory entries are refreshed and retained while relevant; you can ask for your business to be removed at any time.

6. Your rights

You have the rights under UK GDPR to access, correct, delete and port your data, to object to or restrict processing, and to withdraw consent. To exercise them, email hello@weakspot.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).

7. International transfers

Our providers may process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the UK Addendum to standard contractual clauses.

8. Changes

We will post any changes to this policy here and, where significant, tell you by email or in-app.