Privacy notice.
Last updated: 8 September 2026
This notice covers the Sitebound marketing website at sitebound.ai and enquiries submitted through it. It does not describe the processing of delivery, driver or inspector data inside a customer’s Sitebound workspace, which is governed by the applicable service arrangements and notices.
Who is responsible for your information?
Sitebound is a product of XGX AI LIMITED, the controller for information collected through this website. We are registered in England and Wales, company number 15019133, at Whyfield, Truro Business Park, Threemilestone, Truro, England, TR4 9LF. For privacy questions or requests, email [email protected].
What we collect and why
When you contact us, we receive your name, email address, company name if supplied, and the message you send. We use these details to respond to your enquiry, discuss your project and send an acknowledgement. Please do not include sensitive personal information or confidential delivery records in the enquiry form.
Cloudflare hosts and protects this website. Hosting and security services may process IP addresses, request information, browser and device signals. When you open the contact form, Cloudflare Turnstile checks for automated abuse. Our contact endpoint also uses an IP-based, per-server rate limiter covering attempts in the preceding hour. These measures help protect the form and email service from spam and misuse.
We do not initialise advertising, session recording or optional analytics in this website. The fonts and app previews are served with the site. Read our Cookies notice for information about browser storage and security services.
Our legal bases
We respond to business enquiries under our legitimate interest in communicating with prospective customers. Where your enquiry asks us to take steps towards a contract with you, that processing may be necessary to take those steps. We process security information under our legitimate interest in keeping the website and contact service secure, and retain information where required to meet legal obligations.
Submitting an enquiry does not subscribe you to a marketing mailing list. If we introduce optional tracking that requires consent, it will remain off until you choose to allow it, and you will be able to withdraw that choice.
Who receives the information?
Your enquiry is sent to the XGX team through Twilio SendGrid, which delivers the internal notification and your acknowledgement email. The website does not store enquiries in a separate application database; copies are held in the team’s email system and by email providers as needed to deliver and manage messages. Cloudflare processes hosting and verification data. We do not sell your personal data.
Cloudflare and Twilio may process data outside the UK or European Economic Area. Where international transfers require safeguards, we use the applicable provider data processing terms and mechanisms, such as adequacy decisions or standard contractual clauses and the relevant UK provisions. You can contact us for information about the safeguards relevant to your enquiry.
Read more in Cloudflare’s privacy policy and Twilio’s privacy notice.
How long we keep it
Our enquiry retention policy is 12 months after the last communication. If an enquiry becomes a customer relationship, information needed for that relationship is handled under the relevant contractual and legal retention requirements. Security records are kept only as needed for protection, investigation and applicable legal requirements; provider retention also depends on the service and its configuration.
Your rights
Depending on your circumstances and applicable law, you can request access, correction or deletion of your personal information, restrict or object to processing, and request data portability. Where processing relies on consent, you can withdraw it without affecting processing that took place before withdrawal. Contact [email protected] to make a request.
You may complain to the UK Information Commissioner’s Office or, where applicable, your local data protection authority in the EU. We would welcome the opportunity to address your concerns first.
Updates to this notice
We will update this page when the website’s processing changes and show the revision date above. For general Sitebound enquiries, contact [email protected].