Privacy Policy

1. Who we are

This website is operated by PageAlto. We are the controller of the personal data described in this policy. You can contact us about privacy at any time at hello@pagealto.com.

2. The information we collect

Information you give us

• Quote, audit and contact forms: your name, email address, phone number (optional), company, website address, the services you are interested in, project details, budget range, timeline and any file you choose to attach.

• Newsletter: your email address and the date you gave consent.

• Emails and calls: anything you choose to share when you contact us directly.

Information collected automatically

• Technical data: your IP address, browser type and the pages you request. We use this to keep the website secure, prevent spam and abuse, and fix errors. Server logs are kept for a limited period.

• Cookies and analytics: with your consent only, we use Google Analytics and, where relevant, Google Ads to understand how the website is used and measure our advertising. See our Cookie Policy.

• Marketing attribution: with your consent only, we record how you found us (for example the campaign or referring website) and attach it to any enquiry you send.

3. How we use your information and our legal bases

Under the EU and UK General Data Protection Regulation (GDPR), we must have a legal basis for each use of your data:

• To reply to your enquiry and prepare a proposal: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries.

• To deliver services you buy from us: performance of a contract.

• To send our newsletter: your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.

• Analytics, advertising and attribution cookies: your consent, given through our cookie banner.

• Website security, spam prevention and fraud prevention: our legitimate interest in protecting our website and users.

• Accounting, tax and legal records: compliance with legal obligations.

We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.

4. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run our business, under contracts that require them to protect it and use it only on our instructions. These include:

• our website hosting provider;

• our email delivery provider;

• Cloudflare (Turnstile), which helps us tell people and bots apart on our forms;

• Google (Analytics and Ads), only if you consent to those cookies;

• professional advisers such as accountants and lawyers, where necessary.

We may also disclose information where required by law or to protect our rights.

5. International transfers

Some of our service providers are located outside the UK and the European Economic Area, including in the United States. Where we transfer personal data internationally, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

6. How long we keep it

• Enquiries that do not become projects: deleted or anonymised automatically after 24 months.

• Client records: kept for as long as needed for the contract and then for the period required by tax and accounting law.

• Newsletter subscribers: until you unsubscribe.

• Security logs: kept for a short period and then deleted.

Encrypted backups may hold copies for a limited period after deletion before they are overwritten.

7. Your rights

If you are in the UK or the EU

You have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the data protection authority in your country.

If you are in the United States

Depending on where you live (for example California, under the CCPA as amended by the CPRA), you may have the right to know what personal information we collect, to access, correct or delete it, and to opt out of its "sale" or "sharing" for cross-context behavioural advertising. We do not sell personal information. Advertising cookies are only used with your consent, and we honour the Global Privacy Control (GPC) signal as an opt-out. We will not discriminate against you for exercising your rights.

To exercise any of these rights, email hello@pagealto.com. We may need to verify your identity before responding, and we aim to reply within one month (or within the time required by your local law).

8. How we protect your information

We use encryption in transit (HTTPS), access controls with two-factor authentication for our admin systems, private storage for uploaded files, regular backups and security monitoring. No system is perfectly secure, but we work hard to protect your data and will notify you and the relevant authorities of a breach where the law requires it.

9. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it last changed. Significant changes will be highlighted on this page.

11. Contact

Questions about this policy or your personal data? Email hello@pagealto.com.