Get a free scan

Privacy

Privacy policy

We collect as little as we can. This page explains what we store when you use this website or ask for a free scan, why, for how long, and how to have it deleted.

Who we are

This website is run by Sabbir Hossain, trading as AisleFix, Dhaka, Bangladesh. We are based in Bangladesh, outside the European Union.

The General Data Protection Regulation (GDPR) applies to how we handle the personal data of people in the EU. Under the GDPR, we are responsible for your personal data.

Questions about your data? Email [email protected].

What we store when you ask for a free scan

When you send the free scan form, we store:

  • the address (URL) of your store;
  • your work email address;
  • the language of the page you used (English or Dutch);
  • whether you also asked for follow-up emails, and if so, when;
  • a scrambled code made from your IP address (a keyed one-way hash). We can’t turn it back into your IP address. We use it only to spot repeated or automated requests.

To make the scan, we look at public pages of your store, the same pages any visitor can see. We don’t log in to your store for the free scan.

Why we use it, and on what legal basis

  • To send you the scan report you asked for, and a confirmation email. Legal basis: taking steps at your request before a possible contract (GDPR article 6(1)(b)).
  • To send you up to two follow-up emails about your report, only if you ticked that box on the form. Legal basis: your consent (article 6(1)(a)). The report does not depend on it. To stop, reply “Stop” to any of our emails.
  • To stop abuse of the form, using the scrambled IP code and a limit of 5 requests per hour. Legal basis: our legitimate interest in keeping the form usable (article 6(1)(f)).

We don’t add you to a newsletter, we don’t sell or share your data for advertising, and we don’t use it to make automated decisions about you.

How long we keep it

  • Scan requests: 12 months after you send the form. Then we delete them.
  • The request limit (5 per hour): the counter is deleted after one hour.
  • Web server logs (IP address, page requested, date and time, browser type): 14 days. We use them only to keep the site running and to deal with abuse.

Who else handles your data

We use two service providers. They process data only on our instructions, under a data processing agreement:

  • DigitalOcean hosts this website and its database, in a data centre in [full region name].
  • Brevo (Sendinblue SAS, France) sends the scan report and our emails to you.

We don’t share your data with anyone else, unless the law requires us to.

Data stored outside the EEA

DigitalOcean stores the scan requests in [full region name], which is outside the European Economic Area (EEA).

To protect your data there, DigitalOcean has signed the European Commission’s standard contractual clauses with us, as part of its data processing agreement. You can ask us for a copy by emailing [email protected].

Cookies

This website uses no analytics, no tracking cookies and no third-party scripts. That is why there is no cookie banner.

We use two cookies that are strictly necessary for the scan form to work:

  • aislefix-session remembers your form input and messages between pages. It is deleted after 120 minutes without activity.
  • XSRF-TOKEN checks that a form was really sent from this website. It is deleted after 120 minutes without activity.

Your rights

You can ask us to show, correct or delete your data, to stop using it, or to send it to you in a common file format. You can withdraw your consent at any time; this does not affect what we did before.

To delete your data, email [email protected] with the subject “Delete my data” and the email address you used. We do this within one month, and usually within a few days, and confirm by email.

If you think we handle your data wrongly, please tell us first. You also have the right to complain to the data protection authority in your EU country. In the Netherlands, that is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

How we protect your data

  • The whole site uses an encrypted connection (HTTPS).
  • We store a scrambled code instead of your IP address.
  • Only the founder of AisleFix can access the scan requests.
  • We delete data when the retention period ends.

Changes to this policy

If we change how we use your data, we update this page and the date below. If the change affects data we already hold, we tell you by email first.

Last updated: 28 October 2026.