Website Scanning Methodology & Data Rights
Last updated: 27 August 2026
What we do
TrackWatch (operated by Leading Edge OOD) operates a technical scanning service that observes how public-facing websites handle visitor consent and third-party tracking technologies. Our scans are entirely automated, non-intrusive, and passive, we do not interact with website visitors, submit forms, or collect any personal information about individuals.
We identify technical configurations such as:
- Whether a consent mechanism (e.g. a cookie banner) is present and functioning
- Whether tracking pixels (e.g. Meta Pixel, Google Analytics) load before or after consent
- Whether conversion tracking is properly configured
- The website's underlying technology platform
Our findings are made available to digital marketing agencies and similar service providers who help businesses improve their tracking and consent accuracy.
How we scan
| What we do | What we don't do |
|---|---|
| Load a website's public homepage in a controlled browser environment | Log IP addresses of website visitors |
| Observe which scripts, pixels, and banners load and in what order | Set cookies or store data on visitors' devices |
| Record whether a consent interaction was detected | Interact with forms, logins, or payment systems |
| Note the website's visible technology stack | Scrape content, pricing, or proprietary information |
| Cross-reference the business against Companies House to confirm it's a live, registered Ltd or LLP | Scan sole traders, unincorporated partnerships, or personal websites |
Our scanner performs a single, automated technical observation of one page and then stops. No visitor data is collected, stored, or processed.
Why we scan
Businesses operating websites have obligations under UK GDPR, EU GDPR, PECR, and related regulation to ensure tracking technologies respect visitor consent. Many businesses are unaware that their website has a technical configuration that creates compliance risk or wastes advertising spend. Our service exists to surface these issues so a business can address them directly or with the help of a qualified professional.
Your rights as a scanned business
Right to know. You may request a copy of any data we hold about your business by emailing hello@trackwatch.info. We aim to respond within 30 days.
Right to correction. If you believe our technical findings are inaccurate, you may request a re-scan. We will verify and update our records where appropriate.
Right to object / opt out. You may request that your business be excluded from future scanning. Email optout@trackwatch.info with your business name and website URL. We process opt-out requests within 14 days and confirm once completed. Opting out applies to future scans, we cannot recall data already licensed to a buyer before your request.
Right to erasure. You may request deletion of your business's data from our systems. We will comply unless we have a legal obligation to retain it (for example, a record tied to a completed sale, kept as an accounting/audit record).
Data we hold
For each scanned business, we typically hold: business name, website URL, technical findings (consent/pixel observations), severity classification, technology platform, a corporate contact email where publicly available, and a Companies House number where confirmed. Scan data is retained for 12 months from the scan date, or until an earlier opt-out request, except where a specific record has been sold to a buyer, in which case we retain that record as our transaction/audit history.
We do not hold: names, addresses, or contact details of individuals; personal email addresses; financial information; customer or visitor data; or IP addresses/browsing behaviour.
Our lawful basis
We process business data under legitimate interest (Article 6(1)(f) UK GDPR / EU GDPR). We have conducted a Legitimate Interest Assessment covering this processing, available on request by emailing hello@trackwatch.info.
This assessment has been completed internally and is a genuine, current record of our practice and reasoning. It is pending review by a solicitor specialising in data protection; this page will be updated to reflect the outcome of that review.
Where our data is held
Our systems are hosted in Germany (EU). Although TrackWatch is operated by Leading Edge OOD, a Bulgarian company, we apply UK GDPR to all processing relating to UK businesses.
Contact us
For questions about our scanning methodology or a data rights request: hello@trackwatch.info. To opt out of scanning: optout@trackwatch.info.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office: ico.org.uk, or by phone on 0303 123 1113.