This policy explains what personal information Kay & Co. collects, why we collect it, how we use it, and the rights you have. It applies to this website, kayco.net, and to enquiries you send us.
Who we are
Kay & Co. is a doctor-led healthcare SEO and GEO consultancy based in the United Kingdom, and a trading name of The Project Hero Ltd. For the information described here, we are the "data controller". You can reach us through our contact page or by email at hello@kayco.net.
The information we collect
We keep this to a minimum. We only collect:
- Details you send us through the contact form: your name and email address, your message and, if you choose to add them, your company, the service you are interested in and how you found us. We use your enquiry details to reply, and the optional discovery-source answer to understand which channels bring relevant enquiries. This answer is sent with your message to our inbox through Resend; it does not add tracking cookies or identify your individual search query.
- Basic technical information: like most websites, our hosting and security provider (Cloudflare) processes standard request data such as your IP address and browser type to deliver pages and keep the site secure. We do not use this to identify or profile you.
- Aggregated website activity: Cloudflare Web Analytics provides page-view and referrer statistics so we can understand which parts of the site are being used. It does not give us individual visitor profiles.
We use Cloudflare Web Analytics to understand aggregated website activity, such as page views and referrers. Cloudflare states that this service does not collect or use visitors' personal data and does not track individual end users across websites. We do not use Google Analytics, advertising pixels, or buy or build profiles about you.
Free website checker
The website checker sends the public URL you enter to our server. We request that page and up to three linked public information pages, using Cloudflare DNS to check that destinations are publicly reachable. We do not log in, execute the target website scripts or submit its forms. Do not enter private links or links containing personal information.
Public findings and the checked URL may be cached at Cloudflare for up to 10 minutes to avoid repeating requests. Raw fetched HTML is processed during the request and is not deliberately saved. A short-lived hash of your network address is used for abuse control for up to one minute. Standard hosting and security logs may still be processed by Cloudflare. Reports are not automatically emailed to us and downloads are created in your browser.
We also keep a private daily usage summary containing the checked domain, first and last check times, and counts of attempts, completions, cached results, failures and rate-limited requests. This summary does not contain URL paths, report contents, names, email addresses, IP addresses or visitor identifiers. It helps us understand and improve use of the checker. We maintain a rolling 180-day reporting window; older summary rows are removed the next time the checker records activity. Checks of our own website are marked as tests and excluded from the standard usage report. A checked domain does not identify the person who used the tool.
The optional PageSpeed link opens Google with the checked public URL when you choose it. Google then handles that test under its own privacy terms. The separate Digital Planner questionnaire remains in your browser and does not send its answers to our server.
Enquiry & Booking Planner
The Enquiry & Booking Planner processes the aggregate business figures you enter in your browser. It does not send your entries or results to Kay & Co., place them in the page address, or save them in browser storage. Use Clear figures before leaving the tool on a shared device, since a browser may retain an open page or restore it with the Back button. You can choose to download or print a plan; that file or printout is then under your control. Do not enter patient names, contact details or clinical information. Normal website hosting and analytics, described on this page, still apply to the page visit.
Free website speed check
When you run a speed check, we send the public page address to Google PageSpeed Insights. Google loads the page to run a simulated mobile performance test. We turn its findings into a short summary on our website. Do not submit private pages or links containing personal information.
We may cache the public page address and simplified result for up to one hour. We do not deliberately store Google's raw report or screenshots. Separate private daily speed-tool counts contain only the domain, first and last times, and counts of requests, completed tests, cached results, failures and rate-limited requests. As with the website checker, these summaries cover 180 days, older rows are removed on subsequent activity, and own-site tests are excluded from the standard report. A short-lived hash of your network address controls repeated requests for up to ten minutes; no visitor identifier or IP address is stored in the usage database. Standard hosting and security logs may still be processed by our providers.
If you choose to ask us for help, your summary is held in your browser tab to prefill the enquiry form for up to one hour. You can edit it before choosing to submit the enquiry.
Checked website directory
Alongside our rolling daily usage reports, we retain a private directory of domains submitted to either checker, which tool was used, the first and last check times, and aggregate usage counts. This directory has no automatic expiry and remains until we delete it. We use it to understand demand and research businesses that may benefit from our services. It contains no visitor identity, email address, IP address, URL path or full report. Anyone can submit a public website, so a listed domain does not identify the person who ran the test or imply permission from the website owner to contact them. You can contact hello@kayco.net to request removal of a domain.
Cookies
Cloudflare Web Analytics does not set cookies. We do not use advertising or tracking cookies. Because we use no non-essential cookies, we do not show a cookie consent banner. Under UK rules (PECR), consent is only required for cookies that are not strictly necessary.
Our security and hosting provider, Cloudflare, may in some circumstances set a strictly-necessary cookie to protect the site from malicious traffic. This type of cookie is exempt from consent and is not used for marketing or tracking. If we ever add analytics or other non-essential cookies in future, we will introduce a consent banner first and update this page.
How we use your information, and our legal basis
- To respond to your enquiry and provide the information or audit you asked for. Legal basis: our legitimate interests in answering you and, where relevant, taking steps to enter into a contract with you.
- To keep the website secure and working. Legal basis: our legitimate interests in running a safe, reliable site.
- To understand and improve the website. We use aggregated Cloudflare Web Analytics data to see which pages are used. Legal basis: our legitimate interests in improving the site without profiling individual visitors.
Who we share it with
We do not sell your information. We share it only with the service providers that help us run the site and respond to you, acting as our processors:
- Resend: delivers your contact-form message to our inbox by email.
- Cloudflare: hosts the website and provides content delivery, security and aggregated, privacy-friendly website analytics without cookies or individual visitor profiles.
Some of these providers may process data outside the UK. Where that happens, appropriate safeguards (such as UK-approved standard contractual clauses or an adequacy decision) are in place.
How long we keep it
We keep enquiry messages for as long as we need them to deal with your request and for a reasonable period afterwards for our business records, normally no longer than 24 months after our last contact, unless we go on to work together or the law requires us to keep them longer. After that we delete them.
Your rights
Under UK data protection law you have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to ask for a copy in a portable format. To exercise any of these, email us at hello@kayco.net and we will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk. We would, of course, appreciate the chance to put things right first.
Keeping your information safe
We use reasonable technical and organisational measures to protect your information, including a reputable hosting and security provider and limiting access to your enquiries to those who need it to reply.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date above, and for significant changes we will make the update clear on this page.
Contact us
Questions about this policy or your information? Email hello@kayco.net or use our contact page.