Privacy policy
Last updated: 13 October 2026
Who we are
This policy explains how XSAI Consulting Limited, trading as Ping Sites ("Ping Sites", "we", "us"), handles personal data for our website service: pingsites.co.uk, where you can request a free website preview, the websites we build for customers, and the WhatsApp assistant customers use to update them.
We are the controller of the personal data described here. XSAI Consulting Limited is registered in England and Wales, company number 10259146, with its registered office at 128 City Road, London EC1V 2NX.
You can contact us about anything in this policy at [email protected], or by post at the address above.
What we collect
When you request a free preview
- Your Instagram or TikTok handle, which we use to build your preview from your public profile.
- Which ad or link brought you to the page: campaign tags in the link (UTM parameters), Google and Meta click IDs (gclid, fbclid), the page you arrived on and the page you came from.
- Your browser type, to help us spot spam and fix problems.
- When you then message us on WhatsApp: your WhatsApp number, name and the messages you send, including a short note of which ad or link you came from.
- If you contact us another way, such as by email, the details you give us.
If you become a customer
- The business details, text, photos, prices, timetables and other content you give us for your website.
- Your WhatsApp number and the messages and images you send to our WhatsApp assistant.
- Manager access to your Google Business Profile, if you give it to us, so we can set up and update your listing.
- Records of your plan and payments. If you pay by card, your card details are handled by our payment provider and we don't see them.
Cookies
We only use advertising cookies if you accept them. See Cookies below.
How we use it, and our legal basis
| What we do | Legal basis (UK GDPR) |
|---|---|
| Build your free preview and contact you about it | Taking steps at your request before entering a contract |
| Build, host and update your website, and handle your requests by WhatsApp | Performing our contract with you |
| Record which ad or link each enquiry came from, so we know which advertising works | Our legitimate interest in running our advertising efficiently |
| Measure ad conversions with Google and Meta cookies | Your consent, which you can withdraw at any time |
| Keep financial records | Legal obligation |
We don't sell your personal data, and we don't add you to a marketing mailing list because you requested a preview.
Our AI assistant
Customers update their websites by sending WhatsApp messages to an AI assistant. The assistant uses an AI model from a third-party provider to understand what you've asked for and prepare the change. It always shows you a preview first, and nothing is published until you reply YES. If the assistant can't handle a request, a person on our team reads it and deals with it.
The assistant doesn't make decisions about you that have legal or similarly significant effects.
Who we share it with
We use these service providers to run our service. They process data on our behalf and only as we instruct:
- Cloudflare: hosts this website.
- Vercel: runs the system that receives preview requests.
- Google: cloud database and file storage (Firebase), the email service we receive enquiries through (Gmail), AI models, and Google Ads conversion measurement if you accept cookies.
- Meta: WhatsApp messaging for the assistant, and the Meta Pixel if you accept cookies.
- Our payment provider: to take payments.
We may also share data if the law requires it, or to protect our rights or the safety of others.
International transfers
Some of these providers store or process data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations (such as the UK-US data bridge) or by the ICO's International Data Transfer Agreement or Addendum.
How long we keep it
- Preview requests that don't become customers: 12 months after we last contacted you, then deleted.
- Customer data, including WhatsApp messages: for as long as you're a customer, then deleted within 12 months of your plan ending.
- Financial records: 6 years, as UK tax law requires.
Your rights
You have the right to:
- get a copy of the personal data we hold about you
- have it corrected if it's wrong
- have it deleted
- object to, or ask us to restrict, how we use it
- receive it in a portable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email [email protected]. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to sort it out first.
Cookies
When you first visit, we ask whether you accept advertising cookies. If you reject them, or don't choose, no Google or Meta tags load. You can change your choice at any time:
If you accept, these may be set:
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| _gcl_au, _gcl_aw | Google Ads | Links a Google ad click to a preview request, so we can see which ads work | 90 days |
| _fbp, _fbc | Meta Pixel | Links a Facebook or Instagram ad to a preview request, so we can see which ads work | 90 days |
| mml_pt_attribution, mml_pt_lead_id | Ping Sites (session storage) | Remembers which ad you came from during your visit, and records a completed request once | Until you close the tab |
Google and Meta may also set cookies on their own domains under their own policies. We always store one item, whatever you choose:
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| mml_cookie_consent | Ping Sites (local storage) | Remembers whether you accepted or rejected cookies | Until you clear your browser data |
Changes to this policy
If we change this policy, we'll update the date at the top of this page.