Privacy Policy
Last updated: 2026-07-19
This policy explains how REDLINE MANAGEMENT LTD (the "Controller"), operator of WEB Audit (webaudit.me), processes personal data under the EU GDPR (2016/679) and the UK GDPR.
1. Data controller
REDLINE MANAGEMENT LTD (company number 15938927, registered in England & Wales; VAT GB475397543), registered address: 35 Goldfinch Drive, Sandy, SG19 2SA, United Kingdom. Website: https://webaudit.me. Privacy contact: [email protected] (response within 30 days).
2. What data we process
Questionnaire and lead data: name, email, phone number, website URL, company name, industry, revenue band, and your questionnaire answers (goals, problems, presence of tracking tools).
Audit data: an automated crawl and measurement of the publicly available content of the website YOU provide (e.g. Google PageSpeed), the computed scores and the AI-generated report.
Account data (if you sign in): name and email from Google sign-in or the sign-in-link (magic-link) flow.
Payment data: payments are processed by Stripe; we do NOT store card data. The fact of purchase, the package and the amount are recorded on our side.
Session and funnel data: questionnaire progress, drop-off point, payment-intent state (started/completed checkout), approximate country and device/browser data — processed server-side to operate and improve the service.
Technical and abuse-prevention data: IP-based rate limiting (IPs are stored hashed), email-address validity checks (ZeroBounce).
Marketing consent: your newsletter/marketing opt-in status.
3. Purpose and legal basis
Providing the service — producing the audit and delivering the result (performance of contract).
Billing and payment processing (legal obligation, performance of contract).
Server-side session and funnel measurement (legitimate interest): operating the questionnaire flow, detecting errors and improving the service. This is not advertising profiling and is not shared with third parties.
Contacting you about your audit using the details you provided (performance of contract or legitimate interest).
Analytics and marketing: only with your consent (cookie consent or opt-in); withdrawable at any time.
Abuse prevention and service security (legitimate interest): rate limiting, bot protection.
4. Processors
Anthropic (Claude — processing questionnaire answers and website measurements to generate the AI report), Stripe (payments/invoicing), Google (OAuth sign-in; PageSpeed Insights measurement of the provided website), bluefox.email (transactional email), Resend (fallback email), ZeroBounce (email validation), Cloudflare (CDN/security), Hetzner Online GmbH (EU) (hosting — the database runs on our own self-hosted EU server). Each acts under its own privacy policy.
If analytics tools are active with your consent, Google Tag Manager / Google Analytics also acts as a processor (see the Cookie Policy).
5. Retention
Lead and audit data are kept while we provide the service and while the business relationship exists; billing data for the statutory retention period. On a deletion request, data is deleted except where retention is legally required.
6. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Send requests to [email protected] — response within 30 days. You may also lodge a complaint with a supervisory authority (UK: ICO; in the EU, the authority of your habitual residence — in Hungary the NAIH, naih.hu).
7. Cookies
Cookie use is described in the separate Cookie Policy.