Privacy Notice

01Who we are

HighRegard is a trading name of PureView Scans Limited, a company registered in England and Wales. Company No. 16451121. Registered office: Unit 24 Lister Hills Science Park, Campus Road, Bradford, United Kingdom, BD7 1HR. VAT No. GB 509 2602 07. We provide website auditing, repair and search-visibility services — covering websites, local search, structured data and AI-search visibility — to businesses in the United Kingdom. PureView Scans Limited trading as HighRegard is the data controller for personal data collected through this website; “we”, “us” and “HighRegard” in this notice mean that company. Contact: hello@highregard.co.uk, or write to us at Unit 24 Campus Road, Listerhills Science Park, Bradford BD7 1HR.

02What we collect and why

Enquiry and audit forms: name, business contact details, website and the business information you choose to provide. We use this to respond to your enquiry, assess fit and prepare proposals — our legal basis is legitimate interests (responding to a business enquiry you initiated) and, for optional marketing, your consent.

Attribution data: when you send an enquiry, it includes a little information about how you found us. If you have not accepted optional cookies, this is limited to the campaign labels in the link you followed (source, medium and campaign name), the page you landed on (without its query string) and the referring website’s domain. These are details your browser sends when it loads a page; nothing is stored on your device for this. Source and medium are kept only if they are on our fixed list of channel names (such as “google” and “cpc”) and campaign names only if they are short codes; anything else is recorded as “other”, so free text in a link is never kept. We keep them with your enquiry to understand which marketing works, on the basis of our legitimate interests.

If you choose “Accept all”, which includes advertising measurement, we also store this information in your browser so an enquiry on a later visit can be attributed, add the search-term and content labels and the referring page’s path (never its query string), and keep Google’s click reference (gclid, gbraid or wbraid) so we can tell Google Ads that an advert led to an enquiry. That storage and use rely on your consent. Choosing “Analytics only” or “Essential only”, or withdrawing consent later, deletes the stored information and the click reference. Your name, email and message are never sent to Google.

Analytics: only with your consent, we use Google Analytics 4 and Microsoft Clarity to understand how the site is used. Clarity records how pages are used (clicks, scrolling, mouse movement and the page as you saw it) so we can see where people get stuck; text you type into forms is masked and is not sent to Microsoft. Microsoft processes this data for us; see the Microsoft Privacy Statement. Declining consent does not affect any site functionality, and nothing from either tool loads until you accept.

Free tools: the website addresses and business details you enter into our free checkers are processed to produce your result and are not used to build a profile of you. Calculators and generators run in your browser. URL checks run on our server, which fetches the public pages you name. The Live AI Visibility Test additionally sends the business name, location and service you enter to our AI provider (Anthropic) to run the test prompts. Standard technical logs (such as IP-based rate limiting) apply to all server requests.

We do not knowingly collect special-category data and ask you not to include any in messages. This website is directed at businesses, not children.

03The HighRegard application

Account and sign-in: the application uses a work email address and a single-use sign-in link (no password). We store the email address, the times you sign in and the IP address a sign-in link was requested from, and keep a session in a signed, HttpOnly cookie for up to 30 days. Legal basis: performance of the contract under which the workspace was provided.

Connected Google accounts: a workspace can connect Google Ads, Google Search Console and Google Analytics 4 through Google sign-in. Access is read-only: the application never changes a campaign, bid, budget, page or setting. Each connection’s refresh token is stored encrypted per workspace and is deleted when you disconnect the source or when the workspace is closed. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google data is used only to provide the workspace’s analysis to you, is never sold, and is never used for advertising or shared with anyone except as needed to provide the service.

What the application stores from those sources: aggregate performance facts (campaign, search-term, query, page, channel and event figures by day) and the settings you enter (brand terms, lead-event names, thresholds). It is designed not to ingest customer-level personal data: no user identifiers, no message text, no recordings. Where a provider report could contain a person’s name inside a search query, the application drops rows that match personal-data patterns before storage. Facts are retained while the source is connected; disconnecting a source deletes its token immediately and its stored facts are deleted when the workspace is closed or sooner on request. Decisions and work items you record are kept for the life of the workspace.

AI in the application: the optional written assessment on the overview is produced by our AI provider (Anthropic) from aggregate, already-formatted metrics and recommendation titles only — never from row-level data, connection tokens or anything that identifies a customer of yours. The application inserts every figure itself and rejects text that does not reconcile with the underlying metrics.

Demo workspace: the public demo runs on synthetic data about a fictional business and records nothing about you beyond standard server logs.

04Who we share data with

Service providers who process data on our instructions: our CRM (HubSpot), automation platform (Make), email provider (Resend, which also sends application sign-in links), payment processor (Stripe — payment card details go directly to Stripe and never reach us), hosting provider (Vercel) and, for the application, our database provider (Neon, managed PostgreSQL). Google provides the Ads, Search Console and Analytics APIs the application reads from at your instruction. With your consent, Google Analytics shares enquiry conversion events (not your enquiry details) with our Google Ads account, and the Meta Pixel tells Meta which pages you viewed and whether an enquiry was made (not its details) for measuring and showing our Facebook and Instagram adverts. For that pixel data, Meta Platforms Ireland Ltd and we are joint controllers for its collection and transfer; Meta’s own use is governed by its privacy policy. Our AI provider (Anthropic) processes the business details entered into the Live AI Visibility Test and the aggregate metrics behind the application’s written assessment, as described above. Each provider is bound by a data processing agreement. We do not sell personal data. Where providers process data outside the UK, transfers rely on appropriate safeguards such as the UK Addendum to Standard Contractual Clauses.

05Retention

Enquiry records are retained for up to 24 months after our last contact, then deleted unless a client relationship exists (in which case records are kept for the duration of the engagement plus statutory periods for contractual and tax records). Application workspaces are closed at the end of the access period that came with your purchase, or on request at any time; closing a workspace deletes its connection tokens immediately and its stored facts within 30 days. You can ask for an export of your workspace’s decisions and work items before it is closed.

06Your rights

Under UK GDPR you may request access, correction, deletion, restriction, portability, and object to processing; where processing relies on consent you may withdraw it at any time. Email hello@highregard.co.uk — we respond within one month. You may also complain to the Information Commissioner’s Office (ico.org.uk).