Privacy policy
Last updated 16 October 2026
Ismail Sab Ajnalkar, trading as SiteFix Audit ("we", "us") provides website audit services. This policy explains what personal information we collect, why, who sees it, how long we keep it, and the choices you have. We collect as little as the service needs.
Who is responsible
Ismail Sab Ajnalkar, trading as SiteFix Audit is the controller of the personal information described here. Our legal name, address and contact details are at the end of this page.
What we collect, why, and for how long
| Information | When | Why we use it (and our legal basis) | Kept for |
|---|---|---|---|
| Name, email address, company (optional), order reference, package, website URL, pages or journeys to test, notes you add, and your confirmation that you are authorised to have the site tested | When you order or send intake details | To verify your order, confirm scope, carry out the audit, deliver the report and answer questions about it (performance of a contract with you) | Up to 12 months after delivery, then deleted |
| Payment | At checkout | Card details are entered only on the payment provider's hosted page; we never see the full card number. From the provider we receive your email, the amount, the order reference, your answers to the checkout questions (website URL, pages, company) and the card brand, last four digits and card country, which we use to verify and reconcile the order (performance of a contract; legal obligation to keep accounting records) | The payment record stays in our payment-provider account for as long as tax and accounting law requires (typically six years) |
| Test account details you create for a Business sign-in journey | With your intake, if you choose to provide them | To sign in during the audit and the retest only (performance of a contract) | Deleted after the retest, or 60 days after delivery, whichever is first |
| Emails you send us | When you contact us | To reply and keep a record of what was agreed (legitimate interest in running the service and handling disputes) | Up to 12 months after delivery or after the last message, whichever is later |
| Screenshots (and occasionally short screen recordings) of your public web pages | During the audit | As evidence in your report (performance of a contract). Public pages normally contain no personal data; if they do, we blur it | With the report, up to 12 months |
| Server logs (IP address, requested page, browser type) | When you visit this site | Kept by our hosting provider for security and to keep the site running (legitimate interest in security) | Per the hosting provider's standard retention, typically days to weeks |
Analytics, cookies and local storage
This site currently uses no analytics, advertising or tracking scripts and sets no cookies of its own. If that changes, this section and a consent banner will be updated first.
This site sets no cookies of its own and uses browser local storage only for your analytics preference. Fonts are served from this site; no request is made to a third-party font service.
Who else sees your information
- Payment provider (Stripe) processes your payment on its own hosted checkout page and shares with us the details listed in the table above.
- Email provider (Google (Gmail)) stores the messages we exchange with you.
- Hosting provider (Cloudflare Pages) serves this website and keeps standard server logs for security.
We do not sell personal information, use it for advertising, or share it with anyone else unless the law requires it. Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where that happens we rely on an adequacy decision (including the EU-US Data Privacy Framework and its UK Extension, where the provider is certified) or on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
What you should not send us
Please never send your own passwords, API keys, customer data, payment card numbers or other sensitive information. If a Business journey needs a sign-in, create a throwaway test account for us and delete it after the audit. If you send sensitive data by mistake, tell us and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses, and to withdraw any consent you have given (which does not affect what was done before you withdrew it). To exercise any of these, email us; we respond within one month. You can also complain to a data-protection authority — in the UK that is the Information Commissioner's Office (ico.org.uk); in the EU, the authority in your country.
Children
The service is for businesses and adults. We do not knowingly collect information from anyone under 18.
Changes
We update this page when our practices change and show the date at the top.
Who we are and how to contact us
Ismail Sab Ajnalkar, trading as SiteFix Audit
7211 Bona Vista Court, Springfield, VA 22150, United States
Email: ajnalkarismailsab@gmail.com — we reply within 1 business day.