Privacy notice - PHP Security Checker

Running a check

When you run a check we process the website address you submit, a salted one-way hash of your connection’s IP address (used only for rate limiting and abuse prevention - the full address is not stored), a coarse device type (desktop, mobile or tablet), your authorisation acknowledgement and the structured result of the assessment. We do not store the content of your website’s pages. Lawful basis: legitimate interests (providing the service safely and preventing abuse). Assessment records are deleted after 90 days.

Verifying your PHP version

If you enter a PHP version, it is stored with your assessment and labelled as user-supplied. Do not enter passwords, configuration files or other sensitive details.

Contacting Espria

If you submit the enquiry form we process your name, business name, business email, optional telephone number, your message and a summary of the assessment, in order to respond to your enquiry. Lawful basis: steps taken at your request prior to entering a contract, and legitimate interests. Enquiries are retained for up to 365 days unless a business relationship follows. Enquiries may be transferred into Espria’s customer relationship management system.

Marketing communications are sent only if you tick the separate, optional marketing consent. You can withdraw consent at any time by contacting us or using the unsubscribe link in any message.

Analytics

We record first-party usage events (for example “assessment completed” and the result category) against a random session token, without website addresses or personal details. Where you consent, Google Tag Manager may also receive these events. We do not send website addresses, personal data or detailed findings to third-party analytics, and we do not send assessment data to third-party AI services.

Security

Assessment and enquiry records are stored in access-controlled systems available only to authorised Espria staff. Assessment results are never shown to other visitors.

Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection under UK GDPR. To exercise them, or to ask us to delete an assessment or enquiry, contact privacy@espria.com. You may also complain to the Information Commissioner’s Office (ico.org.uk).

This notice supplements Espria’s general privacy policy.