Privacy Policy
Last updated: April 2026
1. Who we are
glassmark is a product of Fourteen Seed Ltd, a company registered in England and Wales (company number 16940050). Our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
Fourteen Seed Ltd is the data controller for the personal data processed through glassmark. You can contact us at hello@fourteenseed.com.
2. What data we collect
We collect the following data through glassmark:
- URLs scanned: the website addresses you enter for scanning
- IP addresses: collected automatically for rate limiting and abuse prevention
- Email addresses: optionally provided for free scan PDF delivery, required for paid reports and access codes
- Payment details: processed securely by Stripe; we do not store your card details
- Advisory booking data: business name, website URL, email, and a description of what you would like help with, collected through the advisory booking form
3. Why we collect it
- To provide the scanning and reporting service
- To send PDF reports by email when requested
- To process paid report purchases and send access codes
- To schedule advisory discovery calls
- To send day 14 and day 75 follow-up emails to paid customers to encourage rescanning and measure progress
- To prevent abuse through rate limiting
4. Legal basis
- Contract performance: processing your payment, delivering your report, and sending your access code
- Legitimate interest: rate limiting, abuse prevention, and aggregated analytics on free scan usage to improve the service
- Consent: marketing communications, where you have opted in
5. Third-party processors
We use the following third-party services to operate glassmark:
- Supabase (EU): database hosting and authentication. Privacy policy
- Stripe (US/EU): payment processing. Privacy policy
- Brevo (EU): transactional and marketing email. Privacy policy
- FireCrawl (US): website crawling and content extraction for scanning. Privacy policy
- Anthropic (US): AI narrative generation using the Claude API. Privacy policy
- Calendly (US): advisory call booking. Privacy policy
6. How long we keep data
- Scan results: retained for 12 months from the date of the scan
- Email addresses: retained until you unsubscribe or request deletion
- Payment records: retained for 7 years as required by HMRC
- IP addresses for rate limiting: retained for 7 days
7. Your rights under UK GDPR
Under UK data protection law, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct any inaccurate data
- Erasure: ask us to delete your personal data (subject to legal retention requirements)
- Object: object to our processing of your data based on legitimate interest
- Data portability: receive your data in a structured, commonly used format
To exercise any of these rights, email us at hello@fourteenseed.com. We aim to respond within 30 days.
8. Cookies
For details of what cookies glassmark uses and how to manage them, please see our Cookie Policy.
9. International transfers
We store data in the EU (via Supabase) wherever possible. Some of our processors (Anthropic, Stripe, FireCrawl, Calendly) are based in the United States and process data under appropriate safeguards, including standard contractual clauses and their respective data protection commitments.
10. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will update the "Last updated" date at the top of this page. For paid customers with active access codes, we will notify material changes by email.
11. Contact and complaints
If you have questions about this policy or want to exercise your data rights, contact us at hello@fourteenseed.com or write to us at:
Fourteen Seed Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):