Privacy Policy

Who we are

This website, searchdesign.ai, is operated by Concept by Hannah Ltd (registered in England and Wales, company number 15280150), trading as Search Design. Our registered office is The Old Bakery, 90 Camden Road, Tunbridge Wells, Kent TN1 2QP, and our VAT number is GB461064709.

Concept by Hannah Ltd is the data controller for the personal data described here. “We”, “us” and “Search Design” mean Concept by Hannah Ltd throughout this policy.

What data we collect

There is no account system, no payment on this site and no tracking-driven marketing. We collect personal data in two ways:

• The contact form. When you send us an enquiry we collect the details you put in it: your name, email address, optionally your company and website, the topic you select, and your message.
• Standard server logs. Like any website, our hosting provider records technical request data such as IP address, browser type and the pages requested, to serve the site and protect it from abuse.

We do not ask for, and have no need of, special category data. Please do not send sensitive personal information through the contact form.

How we collect it

You provide the contact-form data directly when you choose to send it. Server log data is collected automatically by our hosting provider when your browser requests a page. The contact form is protected by an anti-spam challenge (Cloudflare Turnstile), which checks that the submission comes from a person rather than a bot; this involves Cloudflare processing limited technical data such as your IP address for that check.

How we use it

We use the contact-form data only to:

• read your enquiry and reply to it; and
• keep a record of the correspondence while we are dealing with your project or question.

There is no mailing list and no follow-up sequence. We do not use your data for advertising, profiling or automated decision-making, and we do not sell it to anyone.

Our legal basis

Under the UK GDPR we rely on our legitimate interests(Article 6(1)(f)): responding to an enquiry you have chosen to send us, and keeping this website secure and free of spam. You can object to this processing at any time (see “Your rights” below).

Who processes it for us

We keep the chain short and use established providers, each bound by a data-processing agreement and only handling what they need to:

• Vercel — hosts the website and records the standard server logs described above.
• Cloudflare — runs the anti-spam check on the contact form (Turnstile) and routes inbound email sent to our address through to a private mailbox (Cloudflare Email Routing).
• Brevo — delivers the notification email that carries your enquiry to us when you submit the form.

We may also disclose data where the law requires it. We do not share your data for any other purpose.

International transfers

Some of these providers process data outside the UK. Where that happens, the transfer is covered by an appropriate safeguard — a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses — so your data keeps an equivalent level of protection.

How long we keep it

We keep enquiry correspondence only for as long as we need it to deal with your enquiry and any project that follows from it, and then delete it. Server logs are held briefly by our hosting provider for security and diagnostics. We do not keep personal data “just in case”.

The free tools

Our free tools (the feed validator, feed-syntax reference, redirect-map auditor and CLAUDE.md architect) run entirely in your browser. Anything you paste or upload into them is processed on your own device and is never sent to us, to our processors, or to anyone else. Each tool repeats this in a privacy notice on its own page.

Cookies and local storage

We set no advertising or analytics cookies and run no third-party tracking. The site remembers your light or dark theme choice in your browser's local storage; that value stays on your device and is never sent to us. When the anti-spam check runs on the contact page, Cloudflare may set strictly necessary cookies to perform that security check.

Your rights

Under UK data protection law you have the right to access a copy of your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise any of these, contact us using the details below. We respond within one month, and there is normally no charge.

Other websites

This policy covers searchdesign.ai only. Where we link out — for example to our LinkedIn page — those sites have their own privacy policies, and we are not responsible for them.

Changes to this policy

We review this policy from time to time and will post any changes on this page, updating the date at the top. This version is dated 19 May 2026.

Contact us

For anything about this policy, the data we hold, or to exercise your rights, email hey@searchdesign.ai or use the contact form. By post: Concept by Hannah Ltd, The Old Bakery, 90 Camden Road, Tunbridge Wells, Kent TN1 2QP.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.