Privacy Policy
A11YTEST.AI LTD | Company No. 17070504 | Last updated: March 2026
[28 Healdfield Court, Castleford, WF104TU]
1. Who We Are
A11ytest.ai is operated by A11YTEST.AI LTD, a company registered in England and Wales (Company No. 17070504), with registered address at [28 Healdfield Court, Castleford, WF104TU].
We are the data controller for the personal data collected through https://a11ytest.ai. If you have any questions about this policy or how we handle your data, contact us at hello@a11ytest.ai.
2. What Data We Collect and Why
Under UK GDPR Article 6, we must have a lawful basis for processing your personal data. The table below sets out what we collect, why, and the legal basis we rely on.
| Data type | Purpose | Lawful basis |
|---|---|---|
| Email, name, password hash | Account registration and authentication | Contract performance (Art. 6(1)(b)) |
| Company name | Account personalisation (optional) | Legitimate interests (Art. 6(1)(f)) |
| IP address | Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Scan metadata, results, URLs | Delivering the accessibility scanning service | Contract performance (Art. 6(1)(b)) |
| Stripe subscription ID, payment history | Subscription management | Contract performance (Art. 6(1)(b)) |
| Payment records (7 years) | Tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Browser type, device info, access logs | Platform performance and security | Legitimate interests (Art. 6(1)(f)) |
| Usage patterns and feature interactions | Improving our service | Legitimate interests (Art. 6(1)(f)) |
3. Data We Do NOT Collect
- The actual content of PDFs or files you upload — only metadata (filename, type, size) and scan results
- Credit card numbers, CVV codes, or payment card details — all payments are handled by Stripe
- The HTML content of web pages you scan — only the URL and scan results
- Personal or sensitive information contained within scanned documents
4. International Data Transfers
Some processors are outside the UK. We use safeguards for all international transfers:
- Stripe (USA): Covered by the UK-US Data Bridge adequacy decision. See stripe.com/privacy.
- Adobe PDF Services (USA): Governed by Adobe's Data Processing Agreement and Standard Contractual Clauses. PDFs are processed temporarily and not retained. See adobe.com/privacy.html.
- Anthropic Claude API (USA): Governed by Anthropic's Data Processing Agreement. Scan results are sent for AI analysis. Data is not used for model training and is deleted after processing. See anthropic.com/privacy.
Where we rely on Standard Contractual Clauses, copies are available on request by contacting hello@a11ytest.ai.
5. Data Retention
- Account data: Retained while your account is active and for 30 days after account deletion
- Scan history: Retained until you delete the scan or close your account
- Payment records: Retained for 7 years as required by HMRC tax and accounting regulations
- Security logs: Retained for 90 days
6. Your Rights Under UK GDPR
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to data portability (Art. 20)
- Right to restrict processing (Art. 18)
- Right to object (Art. 21)
- Right to opt out of marketing
To exercise any of these rights, contact us at hello@a11ytest.ai. We will respond within one calendar month.
Right to complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
7. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
8. Data Security
Passwords hashed using bcrypt with salt, HTTPS/TLS encryption, restricted database access, regular security reviews, and Stripe PCI DSS Level 1 processing.
9. Children's Privacy
Our service is not directed at anyone under the age of 18.
10. Changes to This Policy
We may update this Privacy Policy periodically and will notify material changes by email and updated date.
11. Contact
Data Controller: A11YTEST.AI LTD
Company No: 17070504
Registered address: [28 Healdfield Court, Castleford, WF104TU]
Email: hello@a11ytest.ai