Privacy Policy
Last updated: 26 September 2026
Binkley is a website health, monitoring and reporting service operated by Aileron Discovery Network Ltd.
Aileron Discovery Network Ltd is responsible for the personal information described in this Privacy Policy where we act as a data controller.
Contact details
Aileron Discovery Network Ltd
Station Business Centre
2 Station Road
Clowne
Derbyshire
S43 4RW
Privacy email: privacy@binkley.co.uk
Telephone: 01246 923890
Website: binkley.co.uk
Application: app.binkley.co.uk
This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights available to you.
1. What is Binkley?
Binkley helps businesses understand and manage the health of their websites.
Depending on the services and integrations enabled for a customer, Binkley may provide:
- website availability monitoring;
- TLS and secure-delivery monitoring;
- website performance checks;
- accessibility assessment;
- website health scoring;
- recommendations;
- reporting;
- support;
- document storage; and
- integrations with third-party services such as Google Search Console and Google Analytics.
Binkley is primarily a business-to-business service.
2. Information we collect
The information we process depends on how you interact with Binkley and which features your organisation uses.
Account and contact information
We may process:
- your name;
- business or organisation name;
- business email address;
- telephone number;
- your role within an organisation;
- Binkley account and membership information;
- account invitation and confirmation information;
- communication preferences; and
- information you provide when contacting us.
Authentication and security information
To operate and secure Binkley, we may process information associated with account authentication and access, including:
- authentication identifiers;
- account status;
- login and session information;
- password-reset and account-confirmation events;
- security and audit information; and
- records needed to investigate suspicious or unauthorised activity.
Passwords are handled through our authentication provider. We do not need to know or view your password.
Website and service information
When your organisation adds a website to Binkley, we may process information such as:
- website addresses and configuration;
- availability and incident information;
- response and monitoring information;
- TLS and certificate information;
- mobile and desktop performance results;
- accessibility assessments and findings;
- recommendations;
- Binkley Health Score evidence and history;
- reporting information;
- integration status and data-freshness information; and
- other technical information required to provide the service.
Most of this information relates to a website rather than an identifiable individual, although some information may constitute personal data depending on the circumstances.
Support and communications
If you contact us for support or communicate with us about Binkley, we may retain:
- support requests;
- correspondence;
- replies;
- relevant attachments;
- internal support notes; and
- information required to investigate and resolve the issue.
Documents
Where documents are uploaded to a Binkley workspace, we may process those files and associated information such as:
- filenames;
- upload dates;
- document metadata; and
- access information.
Customers should only upload personal information that they are authorised to provide to us.
3. Google Search Console and Google Analytics data
Binkley can support optional integrations with Google services.
These integrations are only connected after an authorised user grants the relevant permissions through Google’s OAuth authorisation process.
Google Search Console
Where Google Search Console is connected, Binkley may access and store read-only information relating to authorised website properties, including information such as:
- verified property information;
- clicks;
- impressions;
- click-through rate;
- average search position;
- search queries;
- pages;
- devices;
- countries or other reporting dimensions where used by Binkley’s reporting features; and
- information required to maintain and monitor the integration.
Binkley does not use Search Console access to make changes to your website or Google account.
Google Analytics
Where Google Analytics functionality is made available and you choose to connect it, Binkley may access read-only Google Analytics reporting information for the property you authorise.
This may include aggregated information such as:
- traffic and usage metrics;
- reporting dates;
- channels;
- landing pages;
- device categories;
- other reporting dimensions and metrics used to provide Binkley’s reporting service; and
- property or stream information needed to identify the authorised Analytics property.
Binkley does not use this permission to alter your Google Analytics property.
How we use Google data
We use Google user data only to provide and operate the Binkley features that the customer has chosen to use, including:
- website reporting;
- website-health analysis;
- recommendations;
- monitoring of data freshness; and
- related support.
We do not:
- sell Google user data;
- use Google user data for advertising or personalised advertising;
- transfer it to data brokers;
- use it to determine creditworthiness or for lending purposes; or
- access unrelated Google services such as Gmail, contacts or Google Drive through the Search Console or Analytics integrations.
Because Binkley is a managed service, authorised staff may review reporting information within Binkley where this is necessary to provide a feature or service requested by the customer, provide authorised support, or meet security or legal obligations.
Access is limited to people who need it for those purposes.
Our use of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including its Limited Use requirements.
Google OAuth credentials
Google access tokens are used to make authorised requests to Google services.
Where longer-lived access is required, refresh credentials are stored server-side and protected from client access.
They are not exposed to other Binkley customers.
Disconnecting Google
You can disconnect an authorised Google integration through the available Binkley workflow or ask us to do so.
Disconnecting an integration stops future synchronisation and removes stored connection credentials where applicable.
You can also revoke Binkley’s access through your Google Account permissions.
Disconnecting an integration does not necessarily immediately delete reporting information that has already been imported into Binkley.
Previously imported information is handled in accordance with the retention periods described in this Privacy Policy, or earlier where an applicable deletion request requires it.
4. Why we use personal information
We only process personal information where we have an appropriate lawful basis.
Contract
Where you are personally entering into a contract with us, we may process information where necessary to enter into or perform that contract.
Legitimate interests
In many business-to-business situations, our customer is an organisation rather than the individual user.
We may rely on our legitimate interests to:
- provide and administer Binkley to our business customers;
- manage user accounts and organisation memberships;
- provide customer service and support;
- protect Binkley, our customers and our systems;
- prevent misuse and investigate security events;
- maintain appropriate business and audit records;
- improve the reliability and operation of our service;
- manage our relationship with customers and former customers; and
- promote our own related services where permitted by law.
Where we rely on legitimate interests, we consider whether the processing is necessary and whether those interests are outweighed by the rights and interests of the people concerned.
Legal obligations
We may process information where necessary to comply with legal, regulatory, accounting and taxation obligations.
Consent
Where consent is the appropriate basis, for example for certain marketing activities or non-essential technologies, we will ask for it.
Where we rely on consent, you can withdraw it at any time.
5. When we process information for our customers
There may be circumstances in which a Binkley customer provides personal information for us to process solely on that customer’s behalf.
Where the customer determines why and how that information is processed, the customer will normally be the data controller and Aileron Discovery Network Ltd will act as its data processor.
Our Data Processing Agreement sets out the relevant responsibilities where this applies.
If you believe information about you has been provided to Binkley by one of our customers, you may contact either that customer or us for assistance.
Transactional Emails and Email Service Providers
Binkley, operated by Aileron Discovery Network Ltd, uses Resend (Plus Five Five, Inc.) to deliver essential service and account-related emails, including account invitations, email verification, password resets and security notifications.
To deliver these messages, Resend processes information such as your email address, the email subject and content, and associated delivery information. This processing is necessary for the operation, security and administration of your Binkley account.
Resend may process personal data outside the United Kingdom, including in the United States. Appropriate contractual safeguards are provided for international data transfers, including the UK Addendum to the EU Standard Contractual Clauses where applicable.
Resend states that email and delivery-log data is retained for 30 days under its standard Free, Pro and Scale plans. This is separate from Binkley’s own account and operational data-retention arrangements.
Kualo continues to provide hosting for our business email mailboxes, including support@binkley.co.uk and privacy@binkley.co.uk. Emails sent directly to these addresses are handled through our existing mailbox hosting infrastructure.
For further information about Resend’s data processing arrangements, please see their Data Processing Addendum and Subprocessor List.
6. Who we share information with
We use service providers to operate and support Binkley.
These may include providers involved in:
- application hosting;
- database services;
- authentication;
- private file storage;
- cloud infrastructure;
- website monitoring;
- encrypted backup storage;
- transactional email delivery;
- Google API integrations; and
- professional, accounting or legal services where required.
Our technology providers currently include services from Supabase, Vercel, Google, Resend and Kualo/FilteredMX, depending on the feature concerned.
We only provide service providers with the information reasonably required to perform their function and expect them to protect it appropriately.
An up-to-date list of relevant subprocessors can be made available where required.
We may also disclose information where required by:
- law;
- court order;
- regulatory authority; or
- the need to establish, exercise or defend legal rights.
We do not sell personal information.
7. International transfers
Some of the technology providers we use may process information in countries outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, we use an appropriate lawful mechanism.
This may include:
- UK adequacy regulations;
- the UK International Data Transfer Agreement;
- the UK Addendum to the EU Standard Contractual Clauses; or
- another transfer mechanism permitted by UK law.
The precise mechanism may depend on the provider and processing involved.
If you would like further information about international-transfer safeguards relevant to your personal information, contact:
8. How long we keep information
We do not keep personal information indefinitely simply because it may be useful.
Retention depends on the purpose for which the information is held.
Active customers
Operational information required to provide Binkley is normally retained for the duration of the customer relationship.
After cancellation
When a customer cancels Binkley:
- customer access and ongoing service collection stop;
- the operational workspace is normally retained for 90 days;
- this period allows for account closure, reasonable export requests, queries and possible reactivation.
After the 90-day retention period, operational workspace information is deleted or irreversibly anonymised unless a separate lawful reason requires us to retain specific information.
Former-customer information
We may retain a minimal former-customer relationship record for up to 12 months after termination where appropriate for customer administration and lawful re-engagement.
We do not retain an entire Binkley workspace simply in case a former customer returns.
Support information
Support correspondence may normally be retained for up to 12 months after closure or termination.
Security and audit information
Operational and security audit information may normally be retained for 12 months.
Longer retention may be appropriate where genuinely necessary to investigate:
- a security event;
- a dispute;
- suspected misuse; or
- a legal matter.
Contracts and accounting records
Contracts, invoices, transaction records and information required for accounting, taxation or legal purposes may be retained for longer periods, commonly six years, where appropriate.
Backups
Information deleted from live systems may temporarily remain in encrypted disaster-recovery backups.
Our backups operate on a rolling retention basis and are intended to expire within our defined backup-retention period and no later than the applicable maximum set by our retention procedures.
Backups are not used for ordinary marketing or day-to-day access.
Our recovery procedures include safeguards designed to prevent information that has already been validly deleted from being permanently restored from an older backup.
Legal holds
Where particular information is required in connection with an active legal claim, regulatory requirement, security investigation or dispute, deletion may be suspended for the affected information only.
9. Cancellation and deletion requests
Normal cancellation and a formal request for erasure are not the same thing.
Normal cancellation generally follows the 90-day operational retention process described above.
If you make a valid request for erasure, we will consider whether information can or should be deleted earlier.
The right to erasure is not absolute.
We may need to retain limited information where this is necessary to:
- comply with legal obligations;
- maintain security records;
- establish, exercise or defend legal claims;
- honour a marketing objection; or
- meet another lawful requirement.
Requests concerning deletion or erasure can be sent to:
10. Marketing
We may contact business customers and former customers about Binkley or our own related products and services where this is permitted by law.
Service communications, such as account, security, support, monitoring or contractual messages, are separate from marketing communications.
You can opt out of direct marketing at any time.
Where the Privacy and Electronic Communications Regulations apply to electronic marketing, we comply with the relevant consent or existing-customer requirements.
For individual subscribers, including many sole traders, we will only rely on the existing-customer or “soft opt-in” provisions where the applicable conditions are met.
If you opt out, we may retain a minimal suppression record so that we can continue to respect your preference and do not accidentally add you back to a marketing list.
11. Cookies and similar technologies
The Binkley application uses cookies or similar storage that are necessary for functions such as:
- authentication;
- maintaining a secure user session;
- account security; and
- operating the application.
These technologies are necessary for the authenticated service to work.
Application authentication cookies are intended to remain scoped to the Binkley application and are not intended to provide authentication to the public Binkley website.
The public Binkley website may also use additional technologies in future.
Where consent is required before using non-essential analytics, advertising or similar cookies, we will request that consent and provide appropriate information.
We will not treat consent to non-essential cookies as a condition of using essential Binkley functionality.
12. Security
We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.
Depending on the information and service involved, these measures may include:
- tenant-based access controls;
- role-based permissions;
- restricted administrative access;
- private file storage;
- server-side protection of integration credentials;
- encryption of sensitive stored credentials where appropriate;
- encrypted off-site backups;
- access logging and audit controls;
- recovery and deletion procedures; and
- security and dependency maintenance.
No internet-based service can guarantee absolute security.
If you become aware of a security issue that may involve personal information processed by Binkley, please contact:
For ordinary product or account-support issues, please use:
13. Your data-protection rights
Depending on the circumstances and the lawful basis we rely on, you may have rights including:
- Access — to ask for a copy of personal information we hold about you.
- Rectification — to ask us to correct inaccurate or incomplete information.
- Erasure — to ask us to delete personal information in certain circumstances.
- Restriction — to ask us to restrict how we use information in certain circumstances.
- Objection — to object to certain processing, including processing based on legitimate interests.
- Data portability — to receive certain information in a portable format where the legal conditions apply.
- Withdrawal of consent — where processing is based on your consent.
You have the right to object to the use of your personal information for direct marketing.
These rights do not all apply in every circumstance.
We will normally respond to valid data-protection rights requests without undue delay and within one month, subject to any extensions or exceptions permitted by law.
How to exercise your rights
Email:
Telephone:
01246 923890
Or write to:
Aileron Discovery Network Ltd
Station Business Centre
2 Station Road
Clowne
Derbyshire
S43 4RW
We may need to take reasonable steps to verify your identity before acting on a request.
14. Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we can investigate.
Email: privacy@binkley.co.uk
Telephone: 01246 923890
Post:
Aileron Discovery Network Ltd
Station Business Centre
2 Station Road
Clowne
Derbyshire
S43 4RW
You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
You can find further information through the ICO’s website.
15. Automated decision-making and the Binkley Health Score
Binkley uses technical evidence to calculate and present information such as the Binkley Health Score.
The Health Score assesses the health of a website.
It is not used to make decisions about an individual’s:
- employment;
- credit;
- insurance;
- eligibility for services; or
- other matters that produce legal or similarly significant effects on that person.
We do not currently use solely automated decision-making about individuals that produces legal or similarly significant effects.
16. Children
Binkley is a business service and is not intended to be used by children as customers or account holders.
If you believe a child has provided personal information to us inappropriately, please contact:
17. Changes to this Privacy Policy
We may update this Privacy Policy where:
- Binkley’s services change;
- we introduce new integrations;
- our suppliers or processing arrangements change;
- legal or regulatory requirements change; or
- we otherwise need to clarify how information is handled.
The latest version will be published on the Binkley website together with its updated date.
Where a change materially affects how we use information already collected, we will take appropriate steps to inform affected users where required.
Contact us
For privacy, data-protection or data-rights enquiries:
01246 923890
Aileron Discovery Network Ltd
Station Business Centre
2 Station Road
Clowne
Derbyshire
S43 4RW
For ordinary Binkley product support: