DRAFT — pending legal review. Not yet in force.
This page needs legal review before the site launches.
Privacy Policy
This explains what we collect, why, and what we do with it. Site Rescue™ is a service of NBLK® LLC (New York) and NBLK Global Ltd (United Kingdom).
Last updated: [DATE]
1. Who is responsible for your data
If you are in the United States: NBLK LLC, 767 Broadway #1624, New York, NY 10003.
If you are in the United Kingdom or the European Union: NBLK Global Ltd, 275 New North Road #1540, Islington, London, N1 7AA.
Contact us at info@mysitebroke.co (US) or info@mysitebroke.co.uk (UK).
2. What we collect
When you book a consultation:
| What | Required | Why |
|---|---|---|
| Email address | Yes | To send your calendar link and to identify you if you book again |
| First name | No | So we know what to call you |
| Your website address | No | So we can look at your site before we talk |
| A description of what is wrong | No | So the call starts in the right place |
That is the whole form. We do not ask for your phone number, your company, your address or your industry.
Automatically, when you visit: your browser type, your approximate location from your address on the internet, which pages you looked at, and which site sent you here. This is ordinary server and analytics data.
We do not collect: payment card details on this site, government identification numbers, or any special category data.
3. Why we use it
- To hold the consultation. Your email sends the calendar link. Your website address and description let us look before we talk.
- To manage free consultations fairly. Our system records how many free consultations an email address has taken, so that repeat bookings can be routed appropriately.
- To do the work, if you go ahead.
- To improve the site. Which pages people read, and which they leave.
- To meet our legal and accounting obligations.
We do not sell your data. We do not share it with advertisers. We do not send marketing emails you did not ask for. If you book a consultation and do not go ahead, we do not follow up unless you asked us to.
4. Our legal basis (UK and EU visitors)
- Contract: to arrange and hold your consultation, and to carry out work you have engaged us for.
- Legitimate interests: to keep the site working, to prevent abuse of free consultations, and to understand how the site is used.
- Legal obligation: to keep financial records.
- Consent: for non-essential analytics, where required.
5. Who else sees it
We use a small number of outside services to run this site. Each one sees only what it needs to do its job, and none of them are permitted to use your data for their own purposes.
| What the service does | What it handles |
|---|---|
| Website hosting | Serving the pages, and server logs |
| Database hosting | Your booking record |
| Calendar scheduling | Arranging your consultation |
| Search analytics | How the site performs in search, with no personal data |
All of these operate in the United States.
Beyond these, we share your data only where the law requires it, or where you have asked us to. We do not sell it, and we do not share it with advertisers.
International transfer. If you are in the UK or EU, your data is processed in the United States. We rely on standard contractual clauses and the relevant adequacy frameworks for that transfer.
On request. If you want to know exactly which providers we use, ask us and we will tell you.
6. How long we keep it
| What | How long |
|---|---|
| Consultation bookings that did not become work | Two years, then deleted |
| Client records and project files | Seven years, for tax and accounting |
| Server and analytics data | Fourteen months |
7. Your rights
You can ask us to:
- Show you what we hold about you
- Correct anything wrong
- Delete it, where we are not legally required to keep it
- Stop using it for a particular purpose
- Send it to you in a portable format
Email us and we will respond within thirty days. We will not ask you why.
UK and EU visitors can complain to the Information Commissioner's Office at ico.org.uk.
California residents have the rights above under the CCPA, including the right not to be discriminated against for exercising them. We do not sell personal information as that term is defined.
8. Security
Your booking data travels over an encrypted connection and is stored in Microsoft Azure. Our web application can only run specific approved database commands — it cannot read our database tables directly. Access is limited to the people who need it.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant regulator within the time the law requires.
9. Cookies
We use only what is needed to make the site work, including one small browser record that stops the opening animation replaying during your visit.
[CONFIRM: whether analytics cookies are in use, and whether a consent banner is required.]
10. Children
This site is for businesses. We do not knowingly collect data from anyone under sixteen. If you believe we have, contact us and we will delete it.
11. Changes
We may update this policy. The current version is always the one on this page. Material changes will be noted here with the date.
Notes for legal review
- Retention periods are proposed, not confirmed. Check the seven-year figure against actual US and UK tax requirements.
- The free-consultation counter records how many consultations an email address has taken. Confirm this is adequately disclosed and that the legitimate-interests basis holds.
- International transfer. Confirm the current lawful mechanism for UK and EU data processed in the US, and that the wording reflects it.
- Two controllers. Confirm this split is workable, or whether a joint controller arrangement is needed between NBLK LLC and NBLK Global Ltd.
- Cookies. Confirm what is actually running before this goes live, and whether a consent banner is required.
- CCPA thresholds. Confirm whether NBLK LLC meets the thresholds that trigger CCPA obligations, or whether this section is voluntary.
- Vendors are described by function, not named, to avoid publishing our stack to competitors. Confirm this satisfies UK and EU disclosure requirements, given the offer to name them on request.
- The optional "what is wrong" field is free text, so a visitor could type anything into it, including sensitive information. Consider whether this needs specific handling or a warning on the form.