What this site collects, and why.

What you send me

There are three forms on this site. The contact form asks for your name, email, website and your message. The free AI visibility check asks for your name, email, business name, what you do, your town or area, and optionally your website. After you buy an audit, the onboarding form asks for your name, email and website, and optionally your main service, area, ideal customer, whether you can share Google Analytics or Search Console access, and anything else you want me to know.

The forms are delivered to my inbox by a service called EmailJS. If you email me directly, I get whatever you put in the email.

Paying and booking a call

Payments are handled by Stripe. You enter your card details on Stripe’s page, and I never see your full card number. Stripe tells me your name, email address and what you paid.

Calls are booked through Cal.com, which collects your name, email and anything you add to the booking, and passes them to me.

Analytics and cookies

If you say yes when the site asks, it uses Google Analytics to see how people use it: which pages they visit, how they arrived, roughly where they are, what device and browser they use, and which buttons they press, such as “Book a free call”. If you arrived from a link made for a particular kind of business, it also records which version of the page you saw. Google Analytics sets cookies to do this. It does not tell me who you are.

If you say no, Google Analytics doesn’t load at all and no analytics cookies are set. The site works the same either way. The only thing stored is your answer, in your browser, so you aren’t asked again. You can change your mind at any time, here: Cookie settings, or with the same link in the site footer.

What I use it for

I use what you send to reply to you, to run the free check you asked for, to do the audit you paid for, and to keep the business records UK tax law requires. I use the analytics to work out which parts of the site help people and which don’t.

I don’t sell your details, and I don’t add you to a mailing list.

Under UK data protection law, I rely on three legal grounds. For a paid audit, I need the information to deliver what you bought. For enquiries and free checks, I rely on my legitimate interest in answering people who contact me and running the business. For analytics, I rely on your consent, which you can withdraw at any time.

Who else handles it

The companies above handle some of your data for me: EmailJS for the forms, Stripe for payments, Cal.com for bookings and Google for analytics. So do my email provider and Vercel, which hosts this website and keeps standard server logs. Each of them has its own privacy policy.

Some of them store data outside the UK. Where they do, the transfer is covered by the safeguards UK law requires.

How long I keep it

Enquiries and free-check requests are deleted once I no longer need them, and within two years at most. Records of paid audits are kept for six years, because UK tax law requires it. Google Analytics data is kept for up to 14 months.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct it or delete it, or object to how I use it. Email suteja@theorangestudio.co.uk and I will reply within a month.

If you’re not happy with how I’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.