Privacy notice

Who we are

DexCloud LTD, company number 14270640, operates this website. Contact hello@dexcloud.co.uk with questions about your information or to make a privacy request.

Information you provide

If you contact us, request a website package or request a website audit, we collect your name, email address, business name, website address, service preferences and the message you provide. We use this information to respond to your enquiry, assess the requested work and manage any resulting business relationship.

Website package and free website enquiries

We record your selected package, displayed pricing, request or question, contact details and permission to reply. The guided website brief also collects your business type, services, location, design preferences, optional logo, requested website address and any business story you provide. Your initial answers stay in your browser tab. Choosing Save & continue saves your contact details and answers with DexCloud, assigns your brief to Harley and requests one functional resume-link email from hello@dexcloud.co.uk. We update the saved draft when you continue through later steps. Unsubmitted drafts expire and are deleted after 30 days. You can clear this device’s local copy at any time; this does not delete an already submitted enquiry. Private resume links expire after seven days and can be used once. Uploaded logos are private and accessible to the authorised DexCloud owner. We resize uploaded images in your browser before sending them. A random request identifier prevents duplicate submissions. Saving or submitting a brief does not take payment. Where online payment is available, you separately review the price and terms and complete Stripe checkout. Stripe handles payment details; we store payment and subscription identifiers and verified payment status. We send service messages such as a saved link, brief receipt, trial confirmation, a reminder before the trial ends and payment confirmation. Optional reminders are separate: if offered, an unticked choice lets you request up to two emails about your unfinished website. You can unsubscribe in either reminder. Optional marketing reminders stop on trial signup, purchase, unsubscribe or expiry. We use Cloudflare for transactional email and Resend for optional reminders when enabled. We retain a suppression record to respect your opt-out. We do not enrol existing enquirers retrospectively or add you to general marketing lists. We use the information to respond and agree a suitable service.

How enquiries are handled

Form submissions and audit requests are stored using Cloudflare infrastructure and sent to hello@dexcloud.co.uk as owner notifications. Notification status is recorded so failed alerts can be retried. Relevant hosting providers process information on our behalf. Please do not include passwords, payment details or sensitive personal information in a website enquiry.

Website audits

When you submit an audit request, we also save recognised campaign labels from the link you followed so we can understand which offer brought the enquiry. These labels must not contain personal information. With your optional advertising consent, a separate random event identifier measures audit sign-ups; we do not send your email, audited website address or findings in those event parameters.

The automated checker requests your public homepage, up to two linked pages and public crawler instructions, and analyses their HTML and response headers. When connected, we send only the public website address to Google PageSpeed Insights for mobile and desktop browser tests; your enquiry details are not included. We save the returned performance findings with your audit. It does not log in or change your website. We require your email and your request to receive the report before starting a check. Your request, contact details, stated goal and findings are saved in our owner panel so we can deliver your report and reply about any help you request. You can ask us to stop at any time. We save the request even if the automated check cannot finish. A separate temporary scan cache lasts up to 24 hours; recent results may be reused for up to six hours. We use technical request information for rate limiting and abuse prevention. Results appear on screen and we automatically email a plain-English summary and PDF attachment using Cloudflare Email Service. We record delivery status to handle failures. A signed report link allows anyone you share it with to open the report for 30 days; it contains no email address and is removed from the browser address before optional tracking starts. PDF downloads are generated securely from your saved report. We do not enrol you in a newsletter. Up to three report emails can be requested per email address in 24 hours. If delivery cannot be confirmed, the PDF remains available on screen. The separate PageSpeed Insights link opens Google’s service and passes it the checked page address.

Saved website briefs

When you choose Save & continue, we save your contact details and answers and email one private resume link. Later changes save automatically. Unsubmitted, unpaid drafts are retained for 30 days. Submitted briefs are retained with the enquiry. When you submit a complete brief, we create a client portal workspace with your supplied information. You sign in using a code sent to your email. Payment status is recorded separately; submitting a brief does not start a subscription. Optional reminder emails require your separate permission.

Included domain and monthly service orders

We use your requested domain and confirmed registrant contact details to register and administer an included domain through a domain provider. A request is not a reservation. We only register after the first hosting payment and your confirmation of the name and details. For service-only plan purchases, Stripe collects your business name and website address alongside billing details. A verified payment creates or links your client workspace and an order in our owner panel. We email you for the content and access needed to provide the service. Please do not email passwords.

Hosting payments

Stripe processes hosting payments and recurring subscriptions. We share the information needed to manage your subscription and receive payment and cancellation status from Stripe. Card details are entered directly with Stripe. You can manage or cancel hosting at Manage hosting.

Client portal

The client portal stores account contact details, service and renewal records, project updates and approvals, support conversations, resource links and invoice records. We use these to deliver and administer your services. Cloudflare provides portal hosting, data storage and email sign-in. Necessary authentication cookies keep your session secure. Access is restricted to your client workspace and authorised DexCloud administrators. Linked file and payment providers apply their own access controls and privacy notices. Card details are entered with the payment provider, not stored in this portal.

Business research and relevant outreach

We research selected local businesses using their publicly available websites and company information. We record business contact details, source links, services and factual observations about the public website to assess whether our services may be relevant. We distinguish research from a confirmed request for help. Where this includes personal data, we assess our legitimate interest in proportionate business development against the individual’s rights and expectations before using it, and provide the relevant privacy information. We do not treat a publicly listed email address as consent.

We may contact corporate business subscribers with a relevant offer where permitted. For sole traders and other individual subscribers, electronic marketing requires appropriate consent or another applicable exception. You can object to direct marketing at any time by replying to the message or emailing hello@dexcloud.co.uk. We stop marketing to contacts who object and retain the minimum suppression information needed to respect their choice. Research and correspondence are restricted to authorised staff and relevant service providers, retained only as needed and reviewed for relevance. We do not sell the research list or add researched contacts to a newsletter without permission.

Our basis for using information

We use enquiry information to take steps at your request before entering a contract, or for our legitimate interest in responding to business enquiries. Information required to provide an agreed service is handled as part of that contract. We do not add you to a marketing list simply because you enquire.

Retention and access

We retain information only as long as needed for the enquiry, business relationship and applicable record-keeping obligations. Access is limited to people and service providers who need it for those purposes. Contact us to request access, correction or deletion where applicable.

For website package enquiries, we may also save the campaign labels in the link you used (source, medium, campaign and creative), so we can understand which offer brought you to us. These are submitted with your enquiry; this does not set advertising cookies or add you to a marketing list.

Cookies and website operation

Optional analytics and advertising run only after your permission, when configured. Analytics uses Google Analytics; advertising measurement uses Google Ads and Meta. Rejecting optional tracking does not prevent you using the website or saving a brief. Use Privacy choices in the footer to change or withdraw permission; changing a choice reloads the page to stop previously loaded tags. We remember your choice for up to 180 days. Consented events include public page visits, button clicks, starting and completing enquiries, audit requests and report downloads, requests for help, website brief steps, opening checkout, a confirmed live free trial and a verified first payment. We also measure general failure categories so we can improve the process. Campaign labels and the referring site help us understand where visits come from; private query strings and fragments are excluded. We do not include your name, email, phone, logo, raw answers or private resume tokens in event parameters. Google and Meta may process online identifiers under their own privacy policies, including processing outside the UK with applicable safeguards. Client and owner portals are excluded from optional tags. We count successful public page requests by page and day, without a visitor identifier or tracking cookie. These aggregate counts include repeat visits and automated traffic, and are retained for up to 400 days. Hosting and security providers may process technical request information, such as an IP address, to deliver and protect the website. Third-party sites linked from this website have their own privacy policies.

Meta server-side advertising measurement

When you allow advertising measurement, we can send Meta confirmation that an enquiry was saved, checkout was requested, a live trial started or the first hosting payment was received. This uses Meta Conversions API alongside the browser pixel. We send an event identifier, time, public DexCloud page and the type of enquiry; a paid event includes the actual amount and currency. For matching to adverts, we send a SHA-256 protected version of your normalised email address, your browser information and IP address, and Meta browser or click identifiers when available. The protected email is still personal information. We do not send your message, website answers, audited domain, report findings, logo, card details or private access links. Consent is separate from permission to respond to your enquiry.

Matching information linked to a saved request is retained for up to 30 days so we can measure the first payment after a trial. Queued event matching data is deleted after delivery or failure, with retries limited to 47 hours. Delivery status records are retained for up to 90 days. Withdrawing advertising permission through Privacy choices stops future server events associated with that browser’s consent and removes pending matching information after the request reaches us. We retry an offline withdrawal when you return. Events already delivered to Meta cannot be recalled by changing the browser setting; contact us with any privacy request.

Your rights

Depending on the circumstances, you can request access to your personal information, correction, erasure, restricted processing or portability, and object to certain processing. You can also raise a concern with the UK Information Commissioner’s Office. Contact us first if you would like help resolving a concern.

Updates

This notice describes the website’s current website, client portal and hosting setup. We will update it when the way we process information changes. Last updated: 28 October 2026.