How we handle your data.

When you send the enquiry form we receive your name, email address, what you need, an optional budget range, your message, and which page you sent it from. The form posts to our own server code, which forwards it to our inbox through Resend, an email delivery service. If you email us directly, we receive whatever you choose to include.

We use these details to reply and to discuss your project, nothing else. We do not add you to a marketing list. The legal basis for this under UK GDPR is legitimate interest: you asked us a question, and we need your details to answer it.

When you run the free website review on our homepage, we keep a record of the website address you entered, when you entered it, and how the check went. We do this so we can see the kinds of sites people are looking at and where we might be able to help. We do not record who ran the review: no name, no email, and nothing about your device or location is stored against it, so the entry is about the website, not about you.

If you ask for the full report on the free website review, we collect the email address you type and the website address it asks about, and we use them to prepare and send you that report. The deeper scan runs through Google's PageSpeed Insights service, which fetches and measures the public page you named; your email address is never sent to Google or to anyone else.

To build the report we read a sample of the public pages of the website address you gave us, the way a search engine would: at most a dozen pages, chosen to cover the important ones, respecting the site's robots file. We only ever read the site you named, and we identify ourselves in the request so its owner can see it was us. We keep the findings about that site for up to a day so a repeat request does not mean reading it all over again; those findings are about the website, not about you.

Because you are asking us to look at your site, we treat the request as an enquiry: we keep your email address and the site you asked about, and one of us may use them to reply or follow up about your site. We do not add you to a marketing list and we do not share your details. The legal basis under UK GDPR is legitimate interest, the same as any other enquiry. The system that prepares the report holds your request for up to 30 days, and the copy we receive in our inbox is kept like any other enquiry. If you would rather we did not get in touch, or you received a report you did not ask for, reply to it or email hello@smfstudio.io and we will stop and remove your address.

We measure how the site is used with Cloudflare Web Analytics plus our own event counts (page views, clicks, scroll depth, time on page), stored with Cloudflare. None of it identifies you: no cookies, no user IDs, no fingerprinting, and no linking one visit to another. Each event records only an event name, the page, and where the visit came from, such as a search engine's hostname.

The site sets no cookies. If you switch between light and dark mode, that choice is saved in your browser's local storage so the site remembers it next time. It never leaves your device and tells us nothing about you.

The site runs on Cloudflare, which serves the pages and stores the anonymous analytics, the website-review records, and the report queue. Resend delivers enquiry emails to our inbox, and Google PageSpeed Insights measures the page when you ask for a full report. They act as processors on our behalf and may process data outside the UK under their standard contractual safeguards. We do not sell your details or share them with anyone else.

Enquiry emails stay in our inbox for as long as we need them to handle your enquiry and any project that follows. If you would like an enquiry deleted, email hello@smfstudio.io and we will remove it.

Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or object to us processing it. Email hello@smfstudio.io and we will sort it out. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

If how we handle data changes, a new form or a new provider for example, this page is updated first. Last updated: 7 August 2026.