Privacy notice
The short version: we keep what we need to scan your site and send you the results, and nothing else. There are no analytics, ad pixels or other third-party scripts on this site, so there's no cookie banner either.
Last updated 21 October 2026
Who we are
ShipPatrol is run by PixelArc Ventures Ltd, a company registered in England and Wales (company number 16305788), registered office 510 Burnley Road East, Rossendale, England, BB4 9LB. We are the controller for the personal data described here. We are registered with the UK Information Commissioner's Office, registration number ZB962251.
Questions or requests: matt@pixelarcventures.co.uk.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| The web address you ask us to scan, and the scan results (findings, the pages and requests we saw, response headers) | To run the scan and show you the report at its link | Legitimate interests: providing the service you asked for |
| A one-way hash of your IP address | To limit free scans per person per day and stop abuse. We don't store the IP address itself | Legitimate interests: keeping the service available |
| Your email address, if you sign up for Patrol, sign in, or give it at checkout | To send sign-in links, receipts and the alerts you asked for | Contract |
| Answers you give to the optional onboarding questions (for example, where your customers are) | To work out which rules apply to your site | Legitimate interests |
| Payment records (what you bought, when, and the amount) | To provide what you paid for, handle refunds and keep accounts | Contract and legal obligation |
We don't see or store your card details. Stripe handles payments directly.
What we don't do
- No analytics, advertising or tracking scripts on shippatrol.com, and no third-party fonts or embeds. Our fonts are served from our own domain.
- We don't sell or share personal data for advertising.
- When we check a verified site's database rules, we record whether a table answered, not what was in it. We never keep data read from someone's database.
Cookies
We set one cookie, sp_session, and only when you sign in to Patrol. It keeps you signed in for up to 30 days. It's strictly necessary for the sign-in you asked for, so it doesn't need consent. We don't set any other cookies or use local storage to track you.
About the sites we scan
A scan looks at a website the way any visitor's browser would. The results describe the site, not the person who asked for the scan. Scans are visible to anyone who has the report link, so treat the link like any other document you choose to share. If you run a site and want to know what our crawler does, see ShipPatrolBot.
To classify a site and read its privacy policy, we send the policy's public text to an AI model hosted in our own Microsoft Azure account (Azure OpenAI). Paid reports also use it to write fix prompts. This text is not used to train models.
Who processes data for us
- Microsoft Azure (Microsoft Ireland Operations Ltd and Microsoft Corporation): hosting, storage, email delivery (Azure Communication Services) and AI (Azure OpenAI). Our data is stored in the UK South region. Scans also run from West Europe and East US so we can see what visitors there see.
- Stripe (Stripe Payments Europe Ltd and Stripe, Inc.): payments.
Where a processor handles data outside the UK, we rely on the safeguards in its data processing terms, such as the UK International Data Transfer Addendum or standard contractual clauses.
How long we keep it
- Scan reports: 12 months from the scan, so report links keep working, then deleted.
- IP hashes: only as long as needed to apply the daily free-scan limit.
- Patrol account details: while your account is active, and deleted within 30 days of closing it, unless you ask us sooner.
- Payment records: 6 years, because UK tax law requires it.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email matt@pixelarcventures.co.uk. We'll reply within one month. There's no charge.
If you're unhappy with how we've handled your data, tell us first and we'll acknowledge your complaint within 30 days. You can also complain to the UK regulator, the ICO, at ico.org.uk/make-a-complaint. If you're in the EU, you can also contact your local data protection authority.
Changes
If we change how we handle personal data, we'll update this page and the date at the top. If the change matters for Patrol customers, we'll email you.