Skip to content

Critical security flaws in PHP affect many sites, including WordPress. Read our guide

Privacy Policy

Last updated: 23 October 2026

Who we are

37 Digital is a web development and digital marketing studio run by 37 Digital Limited, a company registered in England and Wales under number 12981796, whose registered office is at 101 King's Cross Road, London WC1X 9LP. 37 Digital Limited is the controller of the personal data described in this policy. Our website address is https://www.37digital.com.

For any privacy-related enquiries, contact us at hello@37digital.com.

What data we collect

We may collect the following information when you use our website or contact us:

  • Contact form submissions: name, email address, phone number (if provided), and message content.
  • Analytics data: anonymised usage data such as pages visited, time spent on site, referring URLs, browser type, and device information.
  • Log data: when you visit our website, our servers may automatically log standard data including your IP address, browser type and version, and technical details relating to any errors encountered.
  • Cookies: small files stored on your device to improve your browsing experience and help us understand how you use our site.

How we use your data

We use the information we collect to:

  • Respond to your enquiries and provide the services you request.
  • Improve our website and the experience we offer.
  • Understand how visitors use our site so we can make it better.
  • Send you relevant information about our services, but only if you have opted in.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

Legitimate reasons for processing your data

We only collect and use your personal information when we have a legitimate reason for doing so. We only collect what is reasonably necessary to provide our services to you.

Cookies

Our website uses cookies to distinguish you from other users and to provide a better browsing experience. We use the following types:

  • Essential cookies: required for the website to function properly.
  • Analytics cookies: help us understand how visitors interact with our site. We use privacy-focused tools that anonymise your data.

You can manage or withdraw your cookie consent at any time by .

Third-party services

We use a small number of trusted third-party services to operate our website:

  • Cloudflare: to deliver our website quickly and protect it from attacks. Every visit passes through Cloudflare's network, which processes your IP address and details of your request to do this.
  • Postmark: to process and deliver contact form submissions securely.
  • Google Analytics 4: to collect anonymised website usage data, only with your consent.

Each of these services has their own privacy policy, and we encourage you to review them. We may also disclose personal information where required by law, or in connection with legal proceedings.

Our free tools

When you use one of our free tools, we process:

  • What you ask us to check: the domain or address you enter. If you enter an email address, we only use the part after the @.
  • HTML you paste in: checked in memory to run the check, then discarded – never stored or logged. If you give the page's address too, we use that address to make sense of the page's links, and log only its domain with the check.
  • Your IP address: to stop the tools being misused, by limiting how many checks one connection can run.

We do this under our legitimate interests in providing the check you asked for and protecting the tools from abuse. We never store your IP address. Instead we keep a code made from it with a key that changes every day. Only we hold the secret the key comes from, and we don't use it to work out addresses or to link codes across days.

We don't keep your results. We keep a log of each check (the tool, the domain checked, the outcome, how long it took and that daily code) for 7 days, and the counts behind the daily limits for 48 hours. Deleted counts can stay in Cloudflare's backups for up to 30 more days.

The tools run on Cloudflare Workers, which processes this data for us. Cloudflare Turnstile checks that a person, not a script, is using a tool. It only loads on the tool pages, and the tools can't work safely without it, so it doesn't need your cookie consent. Cloudflare also uses data from Turnstile, such as your IP address and details of your browser and device, to improve its bot detection for all its customers; for that use Cloudflare is a controller, and its Turnstile privacy addendum explains what it collects. Checks run in the Cloudflare data centre nearest to you, and Cloudflare may store the logs and Turnstile data outside the UK, including in the US (see International transfers below).

The link preview and favicon checkers show a page’s share image and icon by loading it in your browser from wherever the page's tags say it is – usually the checked site itself or the image host it uses. That server can see your IP address. The image is loaded without telling it which page you were on.

If you've accepted analytics cookies, Google Analytics records that a check ran and whether it worked, never the domain or address you checked. You can read more about how the tools work in about our checker.

International transfers of personal information

Some of our third-party providers may store or process data outside the UK. Where this occurs, we ensure those transfers comply with applicable data protection law and that your information remains protected in accordance with this policy.

Cloudflare, Inc. is based in the US. Transfers to it rely on its certification under the UK Extension to the EU-US Data Privacy Framework, and otherwise on the UK International Data Transfer Addendum in its data processing terms. You can ask us for details of the safeguards for any transfer.

Data retention

We retain contact form submissions for as long as necessary to respond to your enquiry and manage our relationship with you. Analytics data is retained in anonymised form and cannot be used to identify individual users. Where we are required to retain information for legal, accounting, or reporting purposes, we will do so accordingly.

Your rights

Under UK data protection law (UK GDPR), you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of any inaccurate data.
  • Request deletion of your personal data.
  • Object to or restrict the processing of your data.
  • Request a copy of your data in a portable format.
  • Make a complaint to the ICO (Information Commissioner's Office) if you believe we have breached data protection law.

To exercise any of these rights, please contact us at hello@37digital.com. We will respond within 30 days.

Changes to this policy

We may update this privacy policy from time to time to reflect changes to our business, practices, or legal requirements. Any updates will be posted at this URL.

Contact us

If you have any questions about this policy or how we handle your data:

Email: hello@37digital.com
Address: 101 King's Cross Rd, London WC1X 9LP
Company No: 12981796
ICO Registration: ZA805330