Privacy policy

This policy explains what Sextant collects when you use this site, why, and what rights you have over it. It applies to sextantscan.com and the scan reports it produces.

Who we are

Sextant is a trading name of Adcock Stanton Limited, a company registered in England and Wales, company number 14869761. Registered office: 72 Stoneyfields Lane, Edgware, Middlesex, HA8 9SW. We are registered with the UK Information Commissioner's Office, registration number ZB644996.

For the purposes of UK GDPR, Adcock Stanton Limited is the data controller for the personal data described below. Contact us at hello@sextantscan.com for anything in this policy, including exercising your rights.

What we collect, and why

Store URLs and scan reports. When you submit a URL to be scanned, we store that URL and the resulting report, which includes the pages we fetched and the structured data we found on them. This is processed under legitimate interest: it is the service you asked for, and there is no way to run a scan without recording what it found.

A salted hash of your IP address, for rate limiting. We do not store your IP address. We compute a cryptographic hash of it, combined with a private salt, and store only that hash together with a date and a count. This lets us enforce a daily limit on anonymous scans without keeping a record of individual addresses. This is processed under legitimate interest: preventing abuse of a free, unauthenticated service.

Email address and message, if you contact us. If you submit the fix enquiry form, we store the email address, the store URL if you gave one, and your message, so we can reply and, if you go ahead, deliver the work. This is processed under legitimate interest and, once you engage us, to take steps towards a contract.

We do not ask for or knowingly collect any other personal data. We do not require an account, a name, or payment details to run a scan.

What a scan actually does

A scan fetches only pages that are already public on the store you submit: its homepage, robots.txt, sitemap, a handful of product pages, and a small number of policy pages, using a normal unauthenticated request that identifies itself as SextantBot. It does not log in, does not use cookies to access anything, and does not touch any page that requires authentication.

Report pages are public by design and shareable by their link: anyone who has the URL of a report can view it, in the same way anyone who has the URL of a public document can view it. We do not search-index individual reports, but we do not restrict access to them by login either. If you would rather a report of your store were not shared further, contact us and we will remove it.

What we do not do

We do not run advertising trackers of any kind. We do not sell, rent or otherwise share your data with third parties for their own marketing. We do not use third party analytics or tracking cookies: this site sets no cookies at all, and carries no analytics script, on any page. The only third party network requests this site makes are to fetch the store you ask us to scan (which is the point of the service) and, at build time on our own servers, to load our own typeface; neither involves your browser sending anything to a third party on your behalf.

Where your data lives

The database is hosted by Neon in their EU (Frankfurt) region. The site itself is hosted by Vercel. Both are data processors acting on our instructions; neither has an independent right to use your data.

How long we keep it

We keep scan reports and enquiry submissions until you ask us to delete them. We review what we hold at least once a year and remove anything we no longer have a reason to keep. To ask for deletion at any time, email hello@sextantscan.com with the report link or the email address you used.

Your rights

Under UK GDPR you have the right to:

• know what personal data we hold about you and why
• have inaccurate data corrected
• ask us to delete your data
• ask us to restrict or object to our processing of it
• receive a copy of it in a portable format

To exercise any of these, email hello@sextantscan.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or by phone on 0303 123 1113. We would appreciate the chance to put things right first, but you do not need our permission to complain.

Changes to this policy

If this policy changes materially, we will update the date below and, where the change affects how we handle data you have already given us, tell you directly.

Effective date: 31 July 2026.