Who we are
This website is operated by TMWV. You can contact us at tmwebventures@gmail.com.
For privacy questions, use the same email address.
What we collect
- Identity and contact details you submit: name, email, telephone if you provide it, business name, location and website.
- The content of an audit, project or contact enquiry, including your answers and, for audits, the scores and notes produced from the public page.
- An SEO health check. We save what you enter when you press Next, so we can follow up on this check. One message about this check is allowed. We will not send marketing unless you tick the box, which starts unticked. That creates or updates one lead, marked unfinished until the form is complete. A partial with no email and no phone is deleted after 90 days. When you give an email, we store that address, the first name, a phone number if you added one, and a town only when the site itself published one. That lead is how we send the one report. The required tick on the email step is consent to send that report. It is not a mailing list, and the report email is that one message. A separate box, “Happy for TMWV to follow up with tips on my site”, is optional and starts unticked. If you tick it, we store that choice, the time, and the wording version, and we may email tips about the site. After that, you can pick a time for a call. We then store the time, the time zone your browser reported, and a private link so you can cancel or move it. A confirmation, cancellation or moved-time email is sent when email is configured. Those messages are about the call you booked. A note added to the call is stored with the lead. The public report link expires after 90 days. When PageSpeed or DataForSEO is configured, the website address and the search phrase are sent to that provider. Your email is not.
- We remember which free tools you've used on this site so your report and any follow-up are relevant to you. That record uses the anonymous visitor id until you submit your email. Only then is it added to the enquiry. It covers an SEO check, a quote estimate, an audit, a demo, and a booking attempt.
- Marketing consent, if you tick an optional box, the time it was given, and the version of the wording you saw. The suggested follow-up in our admin is created only when that box is ticked. If it is not, the enquiry is marked for a reply about what you asked for, and not for marketing.
- A newsletter signup on the notes pages: the email address, the page you used, the wording you ticked, and the time. We email a confirmation link first. Occasional notes are not sent until that link is opened. The confirmation message is the one you asked for by submitting the form. Unsubscribing, including the one-click link in a message, stops the notes and stores a hash of the address so it is not added back by mistake. Signing up again still needs a new confirmation before any note is sent.
- How you arrived, if you later send an enquiry and you have already made a cookie choice: referring site, UTM parameters, landing page, time, and whether an advertising click id was present. The click id itself is not stored. This is kept in a first-party cookie (
tmwv_attr) and, with the anonymous visitor id (tmwv_vid), on our server. Neither cookie is set before you choose Accept analytics or Essential only. The colour and experiment cookies (tmwv_vandtmwv_x) are set only after you choose Accept analytics. Until then you see the default variant, and that visit is not included in experiment results. They are not sent to Google, Meta or Microsoft as an ad audience. - An admin session cookie, only if someone logs in to the private admin area.
- If you request a call: your name, email, phone, business, niche and the days you prefer.
- If you pay a deposit: the amount, what it is for, and a payment status from Stripe. The card number is entered on Stripe's page. We do not receive it.
We do not ask for special-category data, and we ask you not to send it. The audit reads the public HTML of a page you give us. It does not ask you for a password.
Why we use it
- To run the audit you asked for, reply to you, and keep a record of that conversation. The lawful basis is steps toward a contract, and our legitimate interest in responding to enquiries.
- To send occasional marketing email, including tips about a site from the SEO check and the notes from the resources pages, only if you tick the optional box and, for the notes, open the confirmation link. The lawful basis is consent under UK GDPR and PECR, which you can withdraw. The SEO report email, and the newsletter confirmation itself, are sent because you asked for them. They are not used as the notes.
- To understand which pages and links produce enquiries, using the first-party visit record described above. The lawful basis is our legitimate interest in knowing which of our own pages and campaigns lead to a conversation you chose to start. Microsoft Clarity, if you accept analytics, records behaviour such as scrolling and clicks. It is not used to attribute an enquiry to a channel.
- To make a report or a reply relevant to the free tools you used. The lawful basis is our legitimate interest in answering the enquiry you started. The activity stays anonymous until you submit your email. We do not use it to open a marketing follow-up unless you tick the marketing box. The lawful basis for that follow-up is consent.
- To understand which pages are used, using anonymous first-party events, only if you accept analytics. Optional analytics, including those events, Google Analytics and Microsoft Clarity, run only after you accept them. Choosing essential only means they are not stored. The lawful basis for those tools is consent.
- To protect the site from abuse, including rate limits on forms.
Who we share it with
We use suppliers to host the site and the database, and, when configured, to send email (Resend) and a workspace notification (Slack). If Microsoft Clarity is configured, and you have accepted analytics cookies, Microsoft Ireland Operations Ltd processes usage data for heatmaps, scroll depth and session recordings on our instructions. If you accept analytics, we send that anonymous visitor id to Microsoft Clarity so a recording can be matched to this browser. We do not send your name, email or telephone. Text entered in the audit, project, contact and booking forms is masked in those recordings. If you open an embedded calendar, Cal.com or Calendly processes the booking you type there. If an Apple calendar is connected, a call you book is also written to that calendar. If you pay a deposit, Stripe Payments processes the card on Stripe Checkout. Those suppliers process information on our instructions.
We do not sell personal information.
How long we keep it
- Enquiry and audit records, including the visit that led to them: 24 months after the last meaningful contact, then deleted or anonymised, unless a contract is in place. A customer record is kept with the contract. The public SEO report link stops working after 90 days. A website-check partial with no email and no phone is deleted after 90 days. Once you give an email or a phone number, the lead is kept with the other enquiries.
- Contract and invoice records: 6 years after the end of the contract, for UK accounting and tax.
- Marketing consent: until you withdraw it. We may keep a suppression note so we do not email you again by mistake.
- Anonymous analytics events: 14 months.
- Routine hosting logs: up to 30 days, subject to the host's own retention.
We do not keep a full copy of the HTML we fetched for an audit. We keep the scores, the short observations and the details you submitted.
Your rights
You can ask for a copy of your information, a correction, deletion, restriction, or a portable copy, and you can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
You can complain to the Information Commissioner's Office at ico.org.uk. We would like the chance to put things right first.
Cookies
Cookie details are in the cookie policy. The optional marketing box on a form is not a cookie choice.