Home›Privacy Policy
Legal · last updated 10/10/2026

Privacy Policy

How WhatsAEO handles personal data. Plain English, no dark patterns.

Who we are

This site (whatsaeo.co.uk) is operated by Creative Sauce Ltd ("we", "us", "our"), a company registered in England and Wales (Company No. 12582512, VAT No. GB365544675), based in London, trading as WhatsAEO. We are the data controller for personal data collected through this site. You can reach us at hello@creativesauce.io.

What information we collect

How we use it, and our lawful bases

Important: we treat the Playbook download and marketing subscription as separate purposes. Submitting the Playbook form does enrol your email in the WhatsAEO Guide Leads list so we can send you the welcome email and occasional updates. If you prefer not to receive marketing, use the unsubscribe link in the first email, or email us. The contact form has a separate, defaulted-off marketing opt-in; we won’t subscribe you via the contact form without a tick.

Cookies and analytics

We use Google Consent Mode v2. Until you accept, no analytics or advertising cookies are set. If you accept, we use Google Analytics 4 to understand which content is useful; it stores an identifier and some technical information in your browser. You can change your mind at any time via the "Cookie settings" link in the footer; see also our Cookie Policy.

Browser-local storage (interactive tools)

Three tools on this site save your work in your browser only, using localStorage:

Nothing you enter in these tools is transmitted to our servers. Clearing your browser data, using a different device, or using private browsing will clear your saved progress. Each tool offers an export function (JSON for the checklist, CSV for the testing worksheet) so you can keep a copy before clearing.

Who we share it with

We do not sell your data. We share it only with trusted service providers ("sub-processors") who help us run the site, under contracts that require them to protect it and act only on our instructions. These currently include:

We may also disclose information where the law requires it.

AI and your data

Creative Sauce builds AI systems, so we are deliberate about how AI touches personal data. We do not feed the personal data you submit through this website into AI models, and we do not use it to train them. If a future tool on this site uses AI to generate a result, any personal data involved will be processed only to return your result and through providers contractually bound not to train their models on it.

International transfers

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

How long we keep it

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent. To exercise any of these, email hello@creativesauce.io. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Security

We take reasonable technical and organisational measures to protect your data: TLS in transit, service-role scoped keys for backend writes, limited role-based access on the dashboard, and separation between marketing data and operational infrastructure. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children

This site is intended for adults and for business use. We do not knowingly collect personal data from children.

Changes

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be flagged on the homepage for a reasonable period.

This document is provided for general information and transparency. It is tailored to our business and is not legal advice. For your own site, have a qualified solicitor review it.