Privacy

Updated 14 November 2026

IndexFirst is a trading name of Bigg Limited, a company registered in England and Wales (company number 06055984). Our registered office is Premier House, 127 Duckmoor Road, Bristol BS3 2BJ. John Geater is the founder of IndexFirst.

Bigg Limited is the controller of the personal data this notice describes, under UK GDPR and the Data Protection Act 2018. It covers this website and the work we do for clients. Anything further about a client’s data is in our agreement with that client.

This site

We count visits with Rybbit, a privacy-friendly analytics tool that our group runs on its own server. It sets no cookies and doesn’t store your IP address. It tells visits apart with an anonymous code that changes every day, so it can’t follow you from one day to the next or to other sites. It records the pages you view, the links you follow out of the site and how you move around a page (clicks, scrolls and page changes), with anything you type masked. We use this only to see which pages help people and to improve the site. There are no advertising cookies.

If you use the live chat, your messages and anything you choose to give us, such as your name or email, are stored on the support system our group runs on its own servers. An AI assistant may answer first, and a person can read the conversation and reply. We use chats only to answer you.

When you use the “Get started” form, we receive your name, email address, website and the question you typed. Postroom, the form service our group runs, passes it to us by email and keeps a copy so no enquiry gets lost. It also screens submissions for spam, which can include an automated check of the text you send. We use it only to reply to you. If you email us instead, we receive only what you put in that email.

When you open one of our guides, your browser notes it, so the guides list can show which ones you have already read. That note stays on your device and never reaches us. Clearing your browser’s site data removes it.

Like any web server, ours keeps short technical logs, such as IP addresses and the pages requested, to keep the site secure and working.

When we work together

If you write to us, we use your name, email address and what you tell us to reply to you. Once you become a client, we also hold the following.

• Contact details: the names, email addresses and phone numbers of the people we deal with at your firm.
• Site access: the logins you give us for your website, content management system or Google Search Console. We keep them secure, use them only to do your work, and you can change or remove them at any time.
• Our reason: we need this data to carry out our contract with you, and it is in our legitimate interest to run the business and answer enquiries.
• How long we keep it: for as long as we work together. When you leave, we delete your logins and ask you to remove our access. We keep invoices and contract records for as long as the law requires for a limited company, which is normally six years.
• Who else sees it: only the service providers we need to do the work, such as our email provider. We never sell it or use it for advertising.

Your rights

You can ask for a copy of the personal data we hold about you, and ask us to correct it, delete it, limit how we use it, object to how we use it, or pass it to you in a portable form. Email us and we will reply within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the chance to put things right first.

Questions

Email [email protected], or write to IndexFirst, Bigg Limited, Premier House, 127 Duckmoor Road, Bristol BS3 2BJ.