Your data, in plain words.

Who we are

gb.social is a trading name of Momently Ltd, registered in England and Wales, company number 17280873, registered office 201 Broadway Lane, Bournemouth BH8 0AD. Momently Ltd is the controller of the personal data described here. Contact: hello@gb.social or 01202 022435.

What we collect, and why

When you ask for a free audit, a check or a call

Your name, business name, email, town or postcode and website (if you give one), and the page you asked from. We use them to prepare what you asked for, send it to you and follow it up. We look your business up in public search results and maps to do this. Lawful basis: taking steps at your request before a possible contract, and our legitimate interest in replying to people who contact us.

When you use our AI readiness check

The website address you check, your email, your town (if you give it) and the choices you tick. We visit the public pages of that website to score it, and keep your IP address only as a one-way code, to stop the check being overused. We use your email to send your result and, if you leave it ticked, a re-check in 30 days; tips and offers only if you tick that box. Lawful basis: providing the check you asked for, and our legitimate interest in keeping it working fairly.

When you email us or book a call

Whatever you choose to send: usually your name, email, phone number and details of your business. We use it to reply and to arrange the call. Same lawful basis as above.

When you become a client

Contact and billing details, and the business information we need to do the work: your website content, photos, opening hours and the accounts you ask us to look after. Lawful basis: our contract with you, and keeping accounting records the law requires.

Client websites we build

To write the first drafts of your website, the business details you give us (your services, the towns you cover, your about text, and any reviews or jobs you choose to share) are sent to Anthropic's Claude API. You check and approve every draft before anything is published. We use Claude on Anthropic's commercial terms, under which Anthropic doesn't use this content to train its models.

If you edit your website yourself, we store your sign-in codes and sessions (hashed, never in plain text) and the photos you upload, in our database in London. Lawful basis: our contract with you.

If you use our website platform

• Every photo you upload goes through an automatic safety check (fal.ai) before it's used.
• Selfies you give us to make pictures are sent to our picture maker (fal.ai) for each picture and not kept by us.
• AI pictures you don't use are deleted after 30 days.
• We record when you confirm a selfie is you.

Lawful basis for selfies: your consent, when you tick “Yes, that's me”. For the rest: our contract with you.

Google accounts you connect for us to manage

When you or your business sign in with Google and give our tools access, we receive only what you approve on Google's screen. Depending on the service, that is:

• Google Business Profile: your profile details, reviews and performance figures (views, calls, direction requests, website clicks). With your approval we also reply to reviews and publish posts for you. We write the first drafts of those posts and replies with Anthropic's Claude API, which doesn't use them to train its models.
• Google Search Console: the searches your site appears for, clicks and positions.
• Google Analytics: visits to your website, as totals and trends.

We use this data only to run, report on and improve your business's Google presence, as agreed with you. We don't sell it, use it for advertising, or use it to train AI models, and people at gb.social read it only to do your work, to keep it secure, or where the law requires. The access keys Google gives us are kept in our database and used only by our tools. You can remove our access at any time in your Google Account (Security → “Your connections to third-party apps & services”; it may be called “Third-party apps”) or by asking us.

gb.social's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Who handles it for us

• Supabase: our database and photo storage, hosted in London (UK).
• Vercel: hosts this website and our tools. Like any web host, it briefly logs visits (for example IP address and browser) to keep the service running and secure.
• Resend: sends our emails, including the confirmations and audits you ask for.
• ImprovMX: forwards email sent to hello@gb.social to our inbox.
• Google: Business Profile, Search Console and Analytics, for clients who connect them.
• Anthropic (Claude API): writes first drafts of Google Business Profile posts, review replies and client website text. Every draft is approved before anything is published.
• Search-data providers: we look up public search results for your business name, town and website to prepare audits.
• fal.ai (USA): the AI picture maker on our website platform, and the safety check on every uploaded photo.
• Stripe: takes payments, for picture packs and our other services.
• Jina AI and Google PageSpeed: for the AI readiness check, they open the public website you check (its address only, never your details).

Some of these companies are based in the United States, so your data may be processed there. Where it leaves the UK, it is protected by the safeguards UK law requires, such as the UK–US data bridge or the standard contract terms approved for the UK. We never sell personal data.

How long we keep it

• Audit and enquiry details: 2 years from our last contact, unless you become a client.
• AI readiness checks: your email and IP code are cleared after 13 months. The score stays, with no name or contact on it.
• Client records and invoices: 6 years after the work ends, as UK tax law requires.
• Access to your Google accounts: until you remove it or our work for you ends. We delete the keys within 30 days after that.
• Website sign-in codes and sessions: only until they expire or you sign out.
• Website visit logs: kept by our host for a short time, then deleted automatically.

Cookies

This website sets no cookies and uses no tracking or advertising tools. If that changes, we'll update this page and ask you first where the law requires.

Your rights

You can ask to see the personal data we hold about you, have it corrected or deleted, limit or object to how we use it, or receive a copy to take elsewhere. Email hello@gb.social and we'll reply within one month. If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If we change how we use personal data, we'll update this page and the date at the top. Questions? gb.social · hello@gb.social