Legal

Privacy Policy

How we collect, use and protect your personal data — written in plain English, in line with UK GDPR.

Last updated: October 2026

GetFound is the controller of the personal data you share with wearegetfound.co.uk. This policy explains what we collect, why we collect it, and the choices you have.

Your data

When you enquire about, or purchase, our services, we collect the personal information you give us — such as your name, business name, address, email address and phone number. When you browse our website we also automatically receive your device’s internet protocol (IP) address, which helps us learn about your browser and operating system so we can keep the site working well.

Email marketing (where applicable): with your permission, we may send you emails about our services, new offers and other updates. You can unsubscribe at any time.

Website AI tools: our live chat and free AI SEO audit are powered by artificial intelligence — you are talking to a computer, not a person. When you use them, we store what you submit (your messages, and any name, email address, phone number or website address you share) and the AI’s replies, so our team can follow up on your enquiry. AI-generated analysis of websites you submit for a free audit is produced automatically; a human reviews it before we act on it. You can ask us to delete any chat or audit record at any time by emailing us.

Cookies: we set a small number of strictly-necessary cookies to keep the site working (for example remembering your light/dark theme choice and keeping your chat session connected). Analytics cookies are only set if you accept them in the cookie banner — see our cookie policy for the full list and how to change your mind.

Consent

When you provide us with personal information to complete a transaction, verify your payment card, place an order or arrange a delivery, we take that as consent to collect and use it for that specific reason only. If we ask for your personal information for a secondary reason — like marketing — we will either ask you directly for your express consent, or give you an opportunity to say no.

If, after you opt in, you change your mind, you may withdraw your consent for us to contact you, or for the continued collection, use or disclosure of your information, at any time.

Disclosure

We may disclose your personal information if we are required to do so by law, or if you violate our Terms & Conditions.

Who processes data on our behalf

We don’t sell your data. We share it only with trusted companies that process it for us, as our processors, strictly to deliver the service you asked for:

  • Zhipu AI (z.ai) — the AI models behind our chat assistant, SEO audit reports, proposals and drafts (processes message content and the website text you submit).
  • Google — website analytics (only if you accept analytics cookies), plus Google Analytics, Search Console, Ads and PageSpeed data when connected for client reporting.
  • Twilio — SMS, WhatsApp and voice call delivery for numbers and messages you send us or ask us to manage.
  • Retell AI — AI voice agents for inbound and outbound calls (call audio and transcripts).
  • Resend — delivery of transactional emails such as booking confirmations and notifications.
  • Stripe — payment and subscription processing (card details never touch our servers).
  • DataForSEO, Serper and OpenPageRank — search ranking, keyword and backlink data used in SEO audits and reporting.
  • Meta (Facebook & Instagram) — publishing and analytics for social media accounts you connect.

Some of these companies are based outside the UK. Where that happens, we only transfer data under the appropriate safeguards required by UK GDPR (such as the UK Addendum to the EU Standard Contractual Clauses or the UK-US Data Bridge), and we keep this list under review. If we add or replace a processor, we’ll update this page.

Security

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide payment card information, it is encrypted using secure socket layer (SSL) technology and handled by our third-party payment processors. Although no method of transmission over the internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

Your rights

Under UK GDPR, you have the following rights with respect to your personal data:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained.
  • Right of access: you have the right to access the personal data we hold about you.
  • Right to rectification: you have the right to supplement, correct, have deleted or block your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to data portability: you have the right to request all your personal data and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

To exercise any of these rights, email us at hello@wearegetfound.co.uk. If you have a complaint about how we handle your data, we would like to hear from you — but you also have the right to submit a complaint to the supervisory authority, the Information Commissioner’s Office (ICO).

Contact

Questions about this policy or your data? Email us at hello@wearegetfound.co.uk and we will get back to you.