How we use your details.

The short version: we use your email and website address only for what you asked for, we never sell or share them for anyone else’s marketing, and you can have them deleted at any time.

Who we are

Owlinsight is run by WatchOwl LTD, registered in England and Wales (company number 16176048), registered office167–169 Great Portland Street, 5th Floor, London W1W 5PF. WatchOwl LTD is the controller of the personal data described here. For anything about your data, write to hello@owlinsight.co.uk.

What we collect

• Your email address and website address, when you join the waitlist or request an X-Ray. We keep the website address so we can run your X-Ray when it opens.
• A record of your consent: the exact wording you agreed to, its version, and when you agreed and confirmed.
• Your one-time discount code, linked to your email address, and when it was confirmed, expires and is used.
• A one-way, salted hash of your IP address and email address (never the addresses themselves) in our abuse-prevention log, to enforce fair-use limits.
• Bot-protection signals processed by Cloudflare Turnstile when you submit a form.
• When the X-Ray is live: technical facts about the public pages of the website you submit (for example the page title, load times and how many buttons it has) and the report we produce from them.
• Server and network logs: like every website, our hosting and network providers record technical details of each request (such as IP address, browser and the page asked for) to deliver the site and keep it secure.
• Error reports: if a page breaks in your browser, it sends us the error message and the page’s address, nothing about you.
• Visit statistics that don’t identify you, if we use Cloudflare Web Analytics, which sets no cookies.

We don’t ask for, and don’t want, any special category data (such as health or political opinions).

Why, and on what legal basis

• To put you on the waitlist, email you when the X-Ray opens, and send your one-time discount code and occasional guides, as the consent box says: your consent. You confirm it by clicking the link in our confirmation email.
• To run the X-Ray you request and send you your report: to take steps at your request.
• To honour your discount code when you use it: steps at your request.
• To keep the service secure and prevent abuse (bot protection, rate limits, server logs, error reports): ourlegitimate interests in running a safe, reliable service. These checks use as little data as possible and don’t identify you to us.

You can withdraw your consent at any time with the unsubscribe link in every email, or by writing to us. Withdrawing doesn’t affect anything we did before. Giving your email address is optional, but we can’t send you anything without it.

Who processes it for us

These providers act on our instructions under data processing terms, and may not use your data for their own purposes.

• Hostinger (Hostinger International Ltd, Cyprus): hosts the website.
• Cloudflare (Cloudflare, Inc., USA): delivers and protects the website, runs the bot check (Turnstile), runs the parts of the service that handle your form, and provides cookieless visit statistics.
• Brevo (France): sends our emails and manages the confirmation and unsubscribe steps.
• Supabase (Supabase, Inc., USA; data stored in the European Union): our database for consent records, codes and reports.
• Google (PageSpeed Insights, only when the X-Ray is live): measures the speed of the website you submit. It receives that website’s address, not yours.
• Anthropic (Claude API, only when the X-Ray is live): turns the technical facts about the website into plain English. It never receives your email address.

Transfers outside the UK and EEA

Some of these providers are based in, or use sub-processors in, countries outside the UK and EEA, mainly the USA. Where that happens, the transfer is protected by UK adequacy regulations or the EU adequacy decision (including the UK–US data bridge and the EU–US Data Privacy Framework, where the provider is certified), or by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses in that provider’s data processing terms. Write to us for details of the safeguard for a particular provider.

How long we keep it

• Sign-ups that are never confirmed: deleted after 30 days, with any unconfirmed discount code.
• Your email address on our list: until you unsubscribe or ask us to delete it. When you unsubscribe, our email provider keeps your address on a do-not-email list, only so that you aren’t emailed again.
• Consent records: for as long as we keep your email address, so we can show that you agreed.
• Discount codes: 12 months after they expire or are used, so we can answer questions about them. A code is valid for 60 days after you confirm your email.
• X-Ray reports: 12 months.
• Hashed abuse-prevention logs: 30 days.
• Server and network logs: kept by our hosting and network providers for their usual short periods, typically days to a few weeks.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. You can always object to marketing emails, and we’ll stop. Write tohello@owlinsight.co.uk; we reply within one month. We may ask you to confirm the request from the email address concerned, so we only act for the right person.

If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or, in the EU, to the data protection authority where you live or work. We’d appreciate the chance to put it right first.

We make no decisions about you by automated means that have legal or similarly significant effects. The X-Ray report is generated automatically, but it is about a website, not about you, and has no effect on you beyond what you choose to do with it.

Children

Owlinsight is for businesses. It isn’t meant for anyone under 18, and we don’t knowingly collect their data.

Changes

If this policy changes, we’ll update the date above, and email you first if the change affects how we use your data.