What we collect, why, and what we do not do with it. Written to describe how this site actually behaves rather than to cover every eventuality.
Only what you give us and what a web server records automatically. There is no profiling, no data broker, and nothing is sold.
We do not send marketing emails. If you contact us, you get a reply about that enquiry and nothing else. There is no list to unsubscribe from.
The site sets no cookies at all unless you allow analytics. The consent banner stores your choice in your browser’s local storage — that never leaves your device and is not a tracking cookie.
If you agree, we load Google Analytics 4 with IP anonymisation enabled. It tells us which pages people read and which they leave. It does not tell us who you are.
We also use Google Search Console, which sets nothing in your browser and only reports how the site appears in search results.
Declining changes nothing. Every part of the site, including both free tools, works identically either way.
To change your mind, clear this site’s data in your browser settings and the banner will appear again.
When you run a speed check or an SEO audit, the address you enter is sent to Google’s PageSpeed Insights API from our server, and for the SEO audit we also fetch the page itself to read its tags. Google’s handling of that request is covered by their own privacy policy.
We do not keep a record of which addresses were scanned, and results are not stored against you or shown to anyone else.
On our own server — a virtual private server we configure and manage, located in India. Enquiries are stored in a MySQL database on that machine. It is not a shared host, and no third-party CRM or marketing platform holds a copy.
Email notifications are delivered through Hostinger’s mail service, so an enquiry passes through their servers on its way to us. The connection is encrypted.
The site is served over HTTPS with a certificate from Let’s Encrypt. Access to the server is by SSH key only.
Nobody, other than the services that make the site function:
We do not sell data, we do not share it with advertisers, and we do not pass your details to other agencies or freelancers. If a project ever required involving someone else, we would ask you first.
Whether you are covered by the UK or EU GDPR, or India’s Digital Personal Data Protection Act, you can ask us to:
Email hello@bizhoist.com and we will act on it within 30 days. There is no charge and you do not need to explain why.
Because we are small, this is usually done the same week — it is one person running a database query, not a ticket in a queue.
Reasonable and specific measures, rather than a vague promise:
No system is perfect. If something did go wrong that affected your data, we would tell you rather than hope you did not notice.
This site is aimed at businesses and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us something, email us and we will remove it.
If we change how the site handles data, we will update this page and change the date at the top. Material changes will be obvious rather than quietly slipped in.
Questions about anything above, or a request about your data:
Biz Hoist — Delhi, India.
This policy describes what our site genuinely does. It is written in plain English rather than legal boilerplate, and it is not legal advice.
Only to see which pages help and which don’t. Nothing is sold, nothing is used for advertising, and declining changes nothing about how the site works. More in our privacy policy.