Privacy Notice

01Who we are

HighRegard is the trading name of Salim Miah, a sole-trader business based in Yorkshire, England. Correspondence address: Unit 24 Campus Road, Listerhills Science Park, Bradford BD7 1HR. We provide website auditing, repair and search-visibility services — covering websites, local search, structured data and AI-search visibility — to businesses in the United Kingdom. We are the data controller for personal data collected through this website. Contact: hello@highregard.co.uk. If the business incorporates, this notice will be updated with the registered company details.

02What we collect and why

Enquiry and audit forms: name, business contact details, website and the business information you choose to provide. We use this to respond to your enquiry, assess fit and prepare proposals — our legal basis is legitimate interests (responding to a business enquiry you initiated) and, for optional marketing, your consent.

Attribution data: where you arrived from (campaign, search term, referring page). We use this to understand which marketing works. It is stored with your enquiry.

Analytics: only with your consent, we use Google Analytics 4 to understand how the site is used (Microsoft Clarity may be added later; if it is, this notice and the cookie policy will say so before it loads). Declining consent does not affect any site functionality.

Free tools: the website addresses and business details you enter into our free checkers are processed to produce your result and are not used to build a profile of you. Calculators and generators run in your browser. URL checks run on our server, which fetches the public pages you name. The Live AI Visibility Test additionally sends the business name, location and service you enter to our AI provider (Anthropic) to run the test prompts. Standard technical logs (such as IP-based rate limiting) apply to all server requests.

We do not knowingly collect special-category data and ask you not to include any in messages. This website is directed at businesses, not children.

03The HighRegard application

Account and sign-in: the application uses a work email address and a single-use sign-in link (no password). We store the email address, the times you sign in and the IP address a sign-in link was requested from, and keep a session in a signed, HttpOnly cookie for up to 30 days. Legal basis: performance of the contract under which the workspace was provided.

Connected Google accounts: a workspace can connect Google Ads, Google Search Console and Google Analytics 4 through Google sign-in. Access is read-only: the application never changes a campaign, bid, budget, page or setting. Each connection’s refresh token is stored encrypted per workspace and is deleted when you disconnect the source or when the workspace is closed. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google data is used only to provide the workspace’s analysis to you, is never sold, and is never used for advertising or shared with anyone except as needed to provide the service.

What the application stores from those sources: aggregate performance facts (campaign, search-term, query, page, channel and event figures by day) and the settings you enter (brand terms, lead-event names, thresholds). It is designed not to ingest customer-level personal data: no user identifiers, no message text, no recordings. Where a provider report could contain a person’s name inside a search query, the application drops rows that match personal-data patterns before storage. Facts are retained while the source is connected; disconnecting a source deletes its token immediately and its stored facts are deleted when the workspace is closed or sooner on request. Decisions and work items you record are kept for the life of the workspace.

AI in the application: the optional written assessment on the overview is produced by our AI provider (Anthropic) from aggregate, already-formatted metrics and recommendation titles only — never from row-level data, connection tokens or anything that identifies a customer of yours. The application inserts every figure itself and rejects text that does not reconcile with the underlying metrics.

Demo workspace: the public demo runs on synthetic data about a fictional business and records nothing about you beyond standard server logs.

04Who we share data with

Service providers who process data on our instructions: our CRM (HubSpot), automation platform (Make), email provider (Resend, which also sends application sign-in links), payment processor (Stripe — payment card details go directly to Stripe and never reach us), hosting provider (Vercel) and, for the application, our database provider (Neon, managed PostgreSQL). Google provides the Ads, Search Console and Analytics APIs the application reads from at your instruction. Our AI provider (Anthropic) processes the business details entered into the Live AI Visibility Test and the aggregate metrics behind the application’s written assessment, as described above. Each provider is bound by a data processing agreement. We do not sell personal data. Where providers process data outside the UK, transfers rely on appropriate safeguards such as the UK Addendum to Standard Contractual Clauses.

05Retention

Enquiry records are retained for up to 24 months after our last contact, then deleted unless a client relationship exists (in which case records are kept for the duration of the engagement plus statutory periods for contractual and tax records). Application workspaces are closed at the end of the access period that came with your purchase, or on request at any time; closing a workspace deletes its connection tokens immediately and its stored facts within 30 days. You can ask for an export of your workspace’s decisions and work items before it is closed.

06Your rights

Under UK GDPR you may request access, correction, deletion, restriction, portability, and object to processing; where processing relies on consent you may withdraw it at any time. Email hello@highregard.co.uk — we respond within one month. You may also complain to the Information Commissioner’s Office (ico.org.uk).