Clear about the information you share.

Who is responsible for your information?

ForthShift is operated by Kailas Shelar in Edinburgh, Scotland. ForthShift is responsible for deciding how personal information described in this notice is used. Questions or data-protection requests can be sent to hello@forthshift.co.uk.

Information we may collect

• Your name and email address.
• The website address you submit for inspection, the report option you choose and any follow-up permissions you give.
• The information you include in an enquiry, email or later correspondence.
• Project, quotation and service information when we work together.
• Limited technical and security information that may be processed by the services used to host and protect this website.

Please do not include sensitive personal information in a general website enquiry or inspector request.

How we collect it

We receive information directly from you when you email us, prepare an enquiry through this website, request a website inspection, speak with us or become a customer. The enquiry form sends your name, email, business details and message through Cloudflare to our business email inbox, which is hosted in Gmail. We retain the enquiry in our email correspondence; the form does not store it in a website database. Cloudflare Turnstile checks browser and network signals to prevent spam. We use a temporary hashed network identifier for request limits and do not include enquiry content or email addresses in application logs.

Previously generated website reports

The website audit service is currently paused and does not accept new requests. The following information explains how existing report records are handled.

When you use the Website Inspector, it visits the public homepage you provide, assesses selected public website and customer-experience signals, and uses automated analysis to prepare a report. A one-off report is assigned a 30-day expiry and removed from ForthShift's active, protected Cloudflare database by a daily automated cleanup process.

If you choose the report plus six-month recheck and actively agree to it, we keep the report, your name and email address for up to 18 months. This is solely to arrange and prepare the included comparative recheck, which is available between six and eight months after the first report, and to give reasonable time to resolve any report query. You can withdraw this follow-up permission at any time by emailing hello@forthshift.co.uk. Any separate permission to email you after the recheck about relevant support is optional and is not required to buy the report.

A copy of the completed report is kept in session storage in your browser so the report page can display it. It is not used for tracking and is normally cleared when the browser session ends. Cloudflare Turnstile processes technical, browser and network signals to protect the form from automated misuse.

OpenAI receives the public homepage origin and measured public-website evidence to help explain the findings. Submitted paths and query parameters are removed before inspection or storage. If the homepage redirects within the same site, the destination is fetched transiently but only its origin is included in the stored report and OpenAI input. OpenAI does not receive the name or email address from the inspector request.

The report is an automated, informational assessment rather than professional legal, security or accessibility certification. Automated findings can be incomplete, so important decisions should not rely on the report alone.

Why we use it

• To provide the website inspection and report you request.
• To arrange and provide a six-month recheck when you have chosen that option and given clear permission.
• To email you after the recheck about relevant support only where you separately opt in.
• To respond to enquiries and take steps you request before entering into a contract.
• To maintain appropriate business and financial records and comply with legal obligations.
• To protect our website, communications and business from misuse or security threats.

Depending on the purpose, we rely on taking steps at your request before a contract, your consent, complying with legal obligations, or our legitimate interests in responding to enquiries and running a secure and effective business.

Who we may share it with

We use Cloudflare to host, protect and store Website Inspector requests and reports. We use OpenAI only to help explain measured public-website evidence; the inspector does not send OpenAI the contact details entered in the form. We may also use trusted providers for email, business administration and professional advice, or disclose information where required by law. Providers should receive only the information needed for their role, and we do not sell your information.

If a provider processes information outside the UK, we will use the safeguards required by applicable data-protection law where those safeguards are needed.

How long we keep it

One-off Website Inspector records are assigned a 30-day expiry. Records for customers who explicitly choose the six-month recheck are assigned an 18-month expiry. Both are removed by a daily automated cleanup process, so deletion may occur shortly after the expiry point. Cloudflare recovery copies may remain for its limited service-level recovery period after active deletion; they are not used for ordinary processing, and deleted records must be removed again if a recovery copy is restored. Other personal information is kept only for as long as it is reasonably needed for the purpose for which it was collected, to maintain necessary business records, resolve queries or meet legal obligations. Information that is no longer needed should be securely deleted or anonymised.

Cookies and similar technology

ForthShift does not currently use non-essential advertising or analytics cookies. The service hosting this website may use strictly necessary technologies to deliver and secure the site. If we introduce analytics, advertising or other non-essential technologies, we will update this notice and request consent where required.

Your data-protection rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; or receive certain information in a portable form. You can contact us to exercise a right or raise a concern.

You may also complain to the UK Information Commissioner's Office. Visit the ICO complaints page (opens in a new tab).

Changes to this notice

We will review this notice as the website and our services develop. The updated date above will change whenever material amendments are made.