Skip to main content
Wright Websites

Trust Centre

Trust Centre

The details buyers, procurement teams and security reviewers usually ask for, in one place.

We reply within one working day. No pitch, no pressure.

5.0 out of 5 from 18 Google and Trustpilot reviews

Shield

Company details

Trading name
Wright Websites
Address
Wright Websites, Pepys Court, Prestwood, Buckinghamshire, HP16 0AH

Security headers

Every page on this site sends a strict Content Security Policy with a fresh nonce for each request, so only scripts we've approved can run. Scripts also carry integrity hashes, and the site is HTTPS-only with HSTS.

A+

Grade A+ from the Mozilla HTTP Observatory, last checked 8 November 2026 against www.wrightwebsites.co.

Check it yourself: Mozilla HTTP Observatory · securityheaders.com

Grades can change when browsers or grading rules change. The independent graders are the best view of how the site scores today.

How we check

  • Content Security Policy with a per-request nonce
  • Subresource Integrity hashes on scripts
  • HSTS preload
  • csp-forge, sri-sentinel and header-sentinel gate every change before it can go live

Checked on every change by our own open-source tools: csp-forge, sri-sentinel and header-sentinel.

Live header scan, 2026-10-24: 8 of 8 layers

Strict-Transport-Security

Tells browsers to use HTTPS only, for two years, on every subdomain, so nobody can downgrade a visit to plain HTTP.

Data protection

Wright Websites is the data controller for this site under UK GDPR. We use processors only to run the site and fulfil orders.

  • Processors: Vercel (hosting), Supabase (database and file storage), Stripe (payments), Calendly (call booking) and our SMTP email provider.
  • We do not sell personal data or add form submitters to marketing lists.
  • Ask us to delete your data at any time by emailing websites@wrightwebsites.co.
  • Retention and roles are described in the privacy policy.

Privacy policy

Accessibility

We haven't yet carried out a full audit of this website against WCAG 2.2 AA, so we can't say how far it conforms. We'll update this section once we have.

Read our accessibility statement

Responsible disclosure

Found a security issue? Email websites@wrightwebsites.co with the details and steps to reproduce. We'll acknowledge within one working day. Please don't test against client sites. See /.well-known/security.txt.

security.txt · websites@wrightwebsites.co

Common questions