What we keep and why

We store the website address, what our scanner saw on its public pages (including screenshots, which we call plates) and the resulting score. Scans of public pages are not personal data, but plates can show whatever a hotel publishes.

To stop abuse we keep a one-way hash of your IP address next to each scan. We cannot turn it back into your address.

We ask for your work email, your role and the number of keys. No name, no phone. We record the time you agreed to this policy.

• We email you a link to the report once, using our email provider Resend.
• Shrimpton Agency receives a short alert so a strategist can follow up if you ask for an audit.
• If we use Kit for our mailing list, we add your email there tagged as a Hotel Teardown lead. We never add role inboxes such as info@ or reservations@, and we never add anyone on our do-not-contact list.

The report link contains a private key. Anyone you forward it to can read the report.

We may use Google Analytics 4 to count visits and a handful of events: a scan started, a scan completed, a report unlocked, a report viewed and a click to book an audit.

One functional cookie remembers that you unlocked a report on this browser. It holds the report key and nothing else.

Email hello@shrimpton.agency to see, correct or delete what we hold about you, or to unsubscribe. To stop us scanning a website you run, use the removal request form.

We keep scans and leads for as long as they are useful to you and to us, and delete them on request.