Effective date: October 17, 2026

This Privacy Policy explains how personal information is handled when you visit YesUCanDoIt.com, contact us or purchase a website audit.

YesUCanDoIt.com is operated by Michelle Lake, who is responsible for the personal information handled for the purposes described in this policy.

For privacy questions or requests, email michelle@yesucandoit.com.

Information We Collect

The information collected depends on how you interact with the website and our services.

• Enquiries: your name, email address, message and any information you choose to include.
• Audit services: your contact details, business or website name, submitted URLs, agreed review scope, relevant correspondence and the findings and reports prepared for you.
• Transactions: information needed to issue invoices, confirm payments, administer refunds and maintain business records. This may include your billing details, transaction reference, amount paid and payment status.
• Comments: information entered in the comment form, together with technical information used for moderation and spam prevention.
• Website usage: technical and interaction information, such as browser and device details, referring pages, pages visited, approximate location and interactions with website content.
• Consent preferences: choices you make through the website’s cookie-consent controls.

Please do not send passwords, full payment-card details, account credentials or sensitive personal information when requesting an audit. Our audits concern agreed public website pages and do not require access to your website administration account.

How We Use Information

We use relevant information to:

• Operate, maintain and protect the website.
• Respond to enquiries, corrections and privacy requests.
• Agree the scope of an audit and communicate with clients.
• Prepare, check and deliver audit reports.
• Issue invoices, confirm payments and handle cancellations or refunds.
• Maintain necessary accounting and business records.
• Moderate comments and reduce spam or misuse.
• Understand website usage and improve content.
• Measure advertising and affiliate activity where applicable.
• Meet legal obligations and establish, exercise or defend legal claims.

We do not sell client contact lists. Purchasing an audit does not automatically subscribe you to a marketing newsletter.

Legal Bases for Processing

Where the General Data Protection Regulation or similar laws apply, we rely on the legal basis appropriate to the activity:

• Contract and requested pre-contract steps: responding to a request about purchasing an audit, agreeing its scope, processing the order and delivering the service.
• Legal obligations: maintaining records and responding to requests where required by applicable law.
• Legitimate interests: administering ordinary enquiries, maintaining website security, moderating comments, improving our services and managing or defending claims, where these interests are not overridden by your rights.
• Consent: using non-essential cookies or similar technologies where consent is required, and sending optional marketing communications where consent is the applicable basis.

Where processing depends on consent, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Website Audits and AI Assistance

When you purchase an audit, we review the agreed website pages and use the information needed to prepare your report. Public website content may itself contain personal information, such as author names, biographies or contact details.

We use AI-assisted tools, including OpenAI’s ChatGPT, to support tasks such as reviewing public page content, organising observations and drafting report wording. Relevant public URLs, page extracts and review notes may be processed through these tools.

We limit the material shared to what is needed for the review and remove unnecessary client identifiers and private correspondence. We do not need payment details, passwords or account credentials for AI-assisted review.

Michelle reviews the findings and remains responsible for the report delivered to you. AI assistance does not replace human judgement, and we do not use it to make solely automated decisions that produce legal or similarly significant effects about clients.

OpenAI’s handling of information is described in its Privacy Policy. Provider retention and processing may differ from the retention periods we apply to our own client files.

Payments Through PayPal

Payments for audit services are handled through PayPal. PayPal processes payment information under its own terms and privacy notice.

We receive information needed to identify the transaction, confirm payment, provide the service and administer refunds or records. We do not ask you to email full card details.

Please review PayPal’s Privacy Statement for information about its processing.

Email and Client File Storage

Client correspondence is handled through email. Audit reports and related working files are stored in private Google Drive folders. Temporary working copies may also be downloaded to a computer when needed to prepare or check a report.

Client folders are not intended for public access. Files may be shared with the relevant client to deliver the service. Temporary computer copies are deleted when no longer needed.

Google’s handling of information is described in its Privacy Policy.

Cookies and Consent Controls

The website uses WPConsent to provide cookie-consent controls and record visitor preferences. Cookies and similar technologies may support:

• Essential functions: security, basic website operation and recording consent choices.
• Preferences: remembering selected settings.
• Analytics: understanding how visitors use the website.
• Advertising and affiliate activity: displaying or measuring advertisements and attributing referrals.
• Embedded content: displaying content supplied by other websites.

Where consent is required, you can accept or reject optional categories through the consent controls. You can revisit your choices through the website’s available cookie-settings control.

You can also manage cookies through your browser. Blocking some cookies may affect website functions. Withdrawing consent does not necessarily remove information already lawfully processed by a provider; privacy requests can be made to the relevant provider or to us as appropriate.

Google Analytics

We use Google Analytics, connected through Google Site Kit, to understand website traffic and interactions. Depending on your consent choices and the service configuration, information processed may include pages viewed, referral sources, device and browser details, approximate location and interaction events.

Google explains its processing at How Google uses information from sites or apps that use its services.

Advertising

The website may display advertisements supplied by Google AdSense or other advertising partners.

Third-party vendors, including Google, may use cookies or similar technologies to serve and measure advertisements based on visits to this website or other websites. Advertising services may also process information such as IP addresses, device identifiers and interactions with advertisements.

Google’s advertising cookies enable Google and its partners to serve advertisements based on visits to this and other websites.

You can review personalised-ad preferences through Google Ads Settings. Additional industry choices are available through YourAdChoices.

These provider controls are separate from the website’s own consent settings. Where required, advertising processing is subject to your consent choices.

Affiliate Links

Some content contains affiliate links. If you follow a link and make a purchase or complete another qualifying action, we may receive a commission at no additional cost to you.

Merchants and affiliate services, including Amazon where used, may process referral information through tracking links, cookies or similar technologies. Their handling of information is governed by their own privacy notices.

Affiliate relationships are explained in relevant disclosures. An affiliate link does not require you to make a purchase.

Comments

When you submit a comment, we may process the details entered in the form, your IP address and browser information to manage comments, maintain security and detect spam.

Your chosen display name and comment may be published. Your email address is not ordinarily displayed publicly. Please avoid including private or sensitive information in comments.

Comments may be reviewed through automated spam-detection tools.

Embedded Content, Sharing and External Links

Articles may include third-party images, videos or other embedded content. Loading or interacting with embedded material may allow its provider to receive technical information or use cookies, depending on the technology and consent settings.

Sharing a page through a social platform may send information to that platform. If you are signed in, it may associate the interaction with your account.

External websites and platforms handle information under their own policies. Please review those policies before submitting information to them.

Other Service Providers and Disclosures

Information may be handled by providers supporting hosting, email, backups, security, analytics, consent management, payment processing, file storage and AI-assisted preparation.

We limit disclosures to information relevant to the task. Providers may act on our behalf or, for some activities such as payment processing, determine their own processing purposes under their own terms.

We may also disclose information where required by law or reasonably necessary to address fraud, protect rights or establish, exercise or defend legal claims.

How Long We Keep Information

• Enquiries that do not become orders: normally deleted within six months after the last substantive contact.
• Audit reports, working notes and routine client correspondence: normally deleted within twelve months after report delivery or cancellation of the service.
• Invoices, payment confirmations and essential transaction records: retained separately for the period needed to meet applicable accounting, tax and recordkeeping obligations.
• Disputes or legal matters: relevant information may be retained longer where necessary to resolve the matter or meet an applicable legal requirement.
• Public comments: may remain published while the discussion is relevant, subject to moderation and applicable deletion rights.
• Analytics, security and consent records: retained according to the purpose, relevant service configuration and applicable requirements.

Deletion of client working files covers copies under our control in email, Google Drive and temporary computer storage. Some information may remain in restricted backups until those backups are overwritten or expire through their normal cycle.

Independent providers, including PayPal, Google and OpenAI, may retain information under their own policies and legal obligations. Deleting our copy does not automatically delete every provider’s records.

International Processing

Service providers may process information in countries other than your own, including the United States.

Where applicable data-protection law requires safeguards for a transfer, the relevant transfer arrangements must provide the protection required by that law. You may contact us for information about the arrangements relevant to your information.

Your Privacy Rights

Depending on the law that applies to you, you may have rights to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion, subject to applicable exceptions.
• Restrict or object to certain processing.
• Receive a portable copy of information where applicable.
• Withdraw consent where processing is based on consent.
• Complain to a relevant data-protection authority.

To make a request, email michelle@yesucandoit.com. We may request proportionate information to verify your identity and will respond within the period required by applicable law.

Some information may need to be retained to meet legal obligations or establish, exercise or defend claims.

If GDPR applies, you may complain to the supervisory authority in the country where you live or work, or where you believe an infringement occurred. Information about Belgium’s authority is available at the Belgian Data Protection Authority.

Security

We use reasonable measures intended to protect personal information, including private file storage and access controls. No internet transmission or storage system can be guaranteed completely secure.

Please contact us if you believe information connected with this website or an audit has been exposed or misused.

Children’s Privacy

This website and its paid audit service are intended for adults and are not directed to children under thirteen. We do not knowingly collect personal information from children under thirteen.

If you believe a child has provided personal information, please contact us so that we can investigate and take appropriate action.

Changes to This Policy

We may update this policy when our services, practices or applicable requirements change. The revised version will appear on this page with an updated effective date. Where required, we will provide additional notice or request fresh consent.

Continued browsing or purchasing a service does not, by itself, constitute consent to optional processing that requires a separate choice.

Contact

Michelle Lake
YesUCanDoIt.com
Email: michelle@yesucandoit.com