Privacy Policy

Last updated: 14 September 2026

What we collect

When you request a free scan, we collect the website domain you submit and your email address, so we can run the scan and send you the report.

How we use it

To perform the security scan you requested on the submitted domain.
To email you the report and follow up about fixing the issues found.
We do not sell or share your data with third parties for marketing.

Legal basis (GDPR)

We process your data to perform the service you requested (Art. 6(1)(b) GDPR) and based on our legitimate interest in securing the websites whose owners ask us to scan them (Art. 6(1)(f) GDPR).

Storage and retention

Data is stored on Cloudflare infrastructure. Scan requests are kept for up to 12 months, then deleted. Scan reports about your domain are kept while you are a customer.

Your rights

You may request access, correction or deletion of your data at any time by emailing [email protected].

Contact

ScanMend · [email protected]