Privacy Policy

1. Introduction

ByHaradau (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect your information when you visit https://byharadau.com (the “Site”) or use our services. It is intended to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

ByHaradau is a sole trader business operating in England and Wales. We design and manage AI-powered digital operating systems and digital infrastructure for modern businesses.

3. What personal data we collect

Depending on how you interact with us, we may collect and process:

• Identity and contact data – including your name, job title, company name, email address and telephone number.
• Technical and usage data – including your IP address, browser, device information, pages visited, time spent on the Site and referral source.
• Business and service data – including information about your website, digital systems, marketing assets and anything you provide in connection with our services.
• Communication data – including messages, enquiries, strategic review requests and other correspondence with us.
• Form submission data – including the information entered in our contact forms, consent status, submission date and time, page URL, IP address and browser or device information used to submit the request.
• Marketing and preference data – including your choices about receiving updates or marketing communications.
• Website assessment data – including the domain or website URL submitted to the Digital Foundation Check, your confirmation that you are authorised to request the scan, the technical findings, score, report status and related service history.

4. How we use your personal data

We use personal data only where there is a clear business or legal reason to do so. This may include:

• Providing and managing our digital operating systems and managed services.
• Responding to enquiries and delivering strategic reviews.
• Recording contact-form submissions in WordPress and Elementor, sending an email notification to ByHaradau and maintaining an appropriate record of the enquiry.
• Preventing spam, automated submissions, abuse and security threats through Cloudflare Turnstile and related technical safeguards.
• Running an authorised Digital Foundation Check, producing and displaying the requested results, storing the assessment in the ByHaradau application and, where requested, providing reports or ongoing monitoring.
• Improving and personalising the Site and our services.
• Sending relevant information about our services, where consent is required and has been provided.
• Meeting our legal and regulatory responsibilities.
• Protecting the security, availability and integrity of our systems.

5. Legal basis for processing

We rely on one or more of the following lawful bases:

• Contract – where processing is necessary to provide services to you or take steps before entering into an agreement.
• Legitimate interests – where processing supports the operation, improvement or responsible promotion of our services and does not override your rights.
• Consent – for activities such as optional marketing communications and non-essential cookies.
• Legal obligation – where we must process information to comply with the law.

6. Digital Foundation Check

When you submit a website for assessment, we process the domain or URL, your authorisation confirmation and the resulting technical and contextual findings in order to provide the requested check.

The assessment uses information that is publicly accessible from the submitted website and may use specialist infrastructure or third-party technical services to test performance, mobile experience, security configuration and SEO fundamentals. We do not use the check to obtain passwords, access private areas or deliberately collect personal information from the submitted website.

The score and findings may be stored in the ByHaradau application so that we can deliver the result, maintain an assessment history, prevent misuse and support any report or monitoring service you request. Submitting a website does not subscribe you to marketing unless you choose to receive it separately.

7. Data sharing and third parties

We may share personal data only where it is necessary and appropriate, including with:

• Service providers and subcontractors that support hosting, analytics, communications or service delivery, including our website hosting provider, WordPress and Elementor infrastructure, email services, Google analytics services where enabled, and Cloudflare Turnstile for anti-spam and security verification.
• Professional advisers such as lawyers, accountants and insurers.
• Regulators, courts or public authorities where disclosure is required by law.

We do not sell your personal data.

8. International data transfers

Some service providers may process information outside the UK. Where this happens, we use appropriate safeguards designed to protect personal data in accordance with UK GDPR requirements.

9. Data retention

We keep personal data only for as long as it is needed for the purpose for which it was collected, including legal, accounting and reporting requirements.

Information connected with an active client service is generally retained for the duration of the agreement and for a reasonable period afterwards.

Contact-form submissions may be stored in WordPress and Elementor and delivered to us by email. We retain enquiry records only for as long as reasonably necessary to respond, manage any resulting business relationship, prevent abuse and meet legal or operational requirements.

Digital Foundation Check submissions and results are retained only for as long as reasonably necessary to provide the assessment, maintain the requested history, protect the service from misuse and meet legal or operational requirements. You may request deletion of personal data linked to an assessment, subject to any lawful reason that requires us to retain it.

10. Your rights

Under UK GDPR, you may have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request erasure of your personal data.
• Ask us to restrict how your data is used.
• Receive certain data in a portable format.
• Object to particular types of processing.
• Withdraw consent at any time, where processing relies on consent.

To exercise any of these rights, email connect@byharadau.com.

11. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

12. Changes to this Privacy Policy

We may update this policy as our services, systems or legal responsibilities change. The latest version will always be published on this page with the date of the most recent update.

13. Contact us

If you have a question about this Privacy Policy, your personal data or how we handle it, please contact:

ByHaradau
Email: connect@byharadau.com