Privacy Policy

Who we are

PallettAi ("we", "us") is an independent creative technology studio based in the United Kingdom. We build websites, upgrades, and automated tools. This policy explains what personal data we collect when you use pallettai.org ("the site") and its tools, and what we do with it.

What we collect

We only collect what you choose to give us:

• Contact form — your name, email address, company (optional), and the message you send us. We use this to reply to you.
• Website health check — the URL you ask us to grade. It's fetched by our checker to produce your report; we don't build profiles from it and we don't keep a list of sites people have checked.
• Email-me-this-report — your email address, so we can send you the report you asked for. We reply if you've asked us to.
• Payments — if you pay us by card, the payment is processed entirely by Dodo Payments. We never see or store your card details. Dodo is the merchant of record, so they also handle the sales tax on your purchase.

How we use it

• To answer your enquiries and talk to you about a project — usually within 48 hours.
• To send you the health-check report you requested.
• To keep records of work we've agreed to do for you (contract performance).
• To improve the site and our tools.

We never sell your data, and we never use it for advertising. We don't send marketing unless you've specifically asked for it.

Our legal basis

Under UK GDPR we process your data on these grounds: consent (when you submit a form), legitimate interest (running and improving our small business), and contract (when we're delivering work you've commissioned).

Third parties

We use a small number of trusted services that handle data on our behalf:

• Formspree — processes our contact and report forms. Their privacy policy
• Dodo Payments — processes all card payments and recurring subscriptions, as merchant of record. Their privacy policy
• GitHub Pages — hosts this site. Their privacy statement
• Cloudflare — runs our health-check backend. It does not host the public website. Their privacy policy

Cookies & analytics

We don't use tracking cookies and we don't run advertising trackers. This site counts page views and button clicks with GoatCounter, a privacy-friendly, cookieless analytics service — it collects no personal data, sets no cookies in your browser, and doesn't fingerprint visitors. Anything the site needs to remember stays in your own browser's local storage and never leaves your device. The health check doesn't drop cookies on the sites it grades.

How long we keep data

Enquiry messages and the emails they came with are kept only while we're in conversation or delivering your project — after that they're deleted. Anything you need for an active or recently finished project (invoices, agreed specs) is kept for the period we're legally required to (typically 6 years for tax records), then removed.

Your rights

You have the right to:

• Access — ask for a copy of the data we hold about you
• Rectification — correct anything that's wrong
• Erasure — ask us to delete your data
• Restriction — limit how we process it
• Portability — receive your data in a common format
• Object — object to processing based on legitimate interest
• Complain — lodge a complaint with the Information Commissioner's Office (ICO), the UK's data regulator

To exercise any of these, just email us — details below. We'll respond within one month, and usually much faster.

Where your data lives

We're UK-based, and the services we use may process data in the UK, EU, or US. Where data leaves the UK or EEA, it's protected by standard contractual clauses and the safeguards those providers are certified against. We keep transfers to the minimum the services need.

Children

This site is aimed at businesses and adults. We don't knowingly collect data from anyone under 16, and if we find we have, we'll delete it.

Security

All forms submit over HTTPS, and every build we ship — including this site — passes our own layered error and security checks before rollout. Access to your data is limited to the people who actually need it to do the work.

Changes to this policy

If we change anything meaningful, we'll update this page and the date at the top. Material changes to how we use your data will always be flagged when you're interacting with us.

Contact us

Questions, requests, or concerns about your data? Email support@pallettai.org and a real human will reply — we answer everything within 48 hours. For anything that isn't about your data, the support desk is the fastest route.