Privacy notice
Updated 12 October 2026. Confirm the missing business details, prices, tax treatment and service terms before public publication or paid engagement. No legal compliance certification is claimed.
Who is responsible
SiteBoost is the service brand. Before public launch, the owner must confirm the legal trading name, any required business address and the contact email for privacy requests. These details are not invented here.
Information we ask for
Enquiries ask for a name, business name, email, optional website, service interest and project details. Preview requests also ask about the business and preferred direction. We use this information to review and reply to your request. The proposed lawful basis is steps at your request before a potential contract; the owner must confirm the appropriate basis. No marketing consent or sensitive personal data is requested.
Spam checks and email processing
When configured, Cloudflare Turnstile verifies a short-lived CAPTCHA token on the server. The form also uses rate limiting, a honeypot and input validation. Resend processes the business notification and your acknowledgement email. A success response means both requests were accepted by the email provider and the processing result was recorded; it is not proof of inbox delivery.
Storage and retention
Enquiries are stored in the configured managed PostgreSQL database. The proposed enquiry retention is 180 days. Older records and related processing records are removed when the authorised owner loads the tracker. This is lazy deletion, not a scheduled daily purge. Confirm the retention purpose, scheduled purge requirements, backup retention and separate email-inbox retention before launch. The 180-day period is a proposed policy, not a legal requirement.
Access and security
The owner tracker checks the authenticated account on every read or write. Provider secrets stay on the server. Application logs record request identifiers and outcomes rather than names, email addresses or messages. Hosting logs have their own settings and retention. The owner must approve processor agreements, transfer arrangements and incident procedures.
Your choices and rights
Contact the confirmed privacy email to ask about access, correction, deletion, restriction, objection or portability, where applicable. Requests must be handled using a documented identity-checking process. You can raise concerns with Ireland’s Data Protection Commission.
Optional measurement
Optional Plausible analytics runs only when the provider is configured and you opt in. Cookie settings in the footer let you withdraw that choice. The final provider inventory, privacy wording and consent settings must be reviewed before enabling it.