Privacy Policy

Who we are

BeSpottd is a trading name of Kubo Services Ltd, registered in England & Wales. We provide digital presence audit services for UK small businesses.

ICO Registration: pending

What data we collect

• Email address (to deliver your report)
• Website URL (to perform the audit)
• Business name (optional, for personalisation)
• Social media profile URLs (optional, for social audit)
• Payment information (processed by Stripe — we never see your card details)
• IP address (for rate limiting and security)

How we use your data

• To perform your website audit and generate your report
• To send you your audit results by email
• To process payments via Stripe
• If you opt in: to send marketing emails about your audit results and offers
• To prevent abuse of our service (rate limiting)

Legal basis for processing

• Consent: You provide explicit GDPR consent before scanning
• Contract: Processing your payment and delivering the service you paid for
• Legitimate interest: Preventing fraud and abuse

Data retention

• Free audit data: automatically deleted after 90 days
• Paid audit data: retained permanently (or until you request deletion)
• Email OTPs: deleted after 24 hours
• Payment records: retained as required by UK tax law (6 years)

Third-party services

• Supabase: Database hosting (EU region)
• Stripe: Payment processing
• Resend: Email delivery
• Vercel: Application hosting
• Google APIs: PageSpeed Insights and Places (for audit checks)

Your rights (GDPR)

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email privacy@bespottd.com.

Cookies

We use essential cookies only (session authentication). We do not use tracking cookies, analytics, or advertising cookies. See our Cookie Policy for details.

Contact

For privacy inquiries: privacy@bespottd.com

General enquiries: hello@bespottd.com