Trust Centre
Trust Centre
The details buyers, procurement teams and security reviewers usually ask for, in one place.
We reply within one working day. No pitch, no pressure.
Shield
Company details
- Trading name
- Wright Websites
- Address
- Wright Websites, Pepys Court, Prestwood, Buckinghamshire, HP16 0AH
Security headers
Every page on this site sends a strict Content Security Policy with a fresh nonce for each request, so only scripts we've approved can run. Scripts also carry integrity hashes, and the site is HTTPS-only with HSTS.
A+
Grade A+ from the Mozilla HTTP Observatory, last checked 8 November 2026 against www.wrightwebsites.co.
Check it yourself: Mozilla HTTP Observatory · securityheaders.com
Grades can change when browsers or grading rules change. The independent graders are the best view of how the site scores today.
How we check
- Content Security Policy with a per-request nonce
- Subresource Integrity hashes on scripts
- HSTS preload
- csp-forge, sri-sentinel and header-sentinel gate every change before it can go live
Checked on every change by our own open-source tools: csp-forge, sri-sentinel and header-sentinel.
Strict-Transport-Security
Tells browsers to use HTTPS only, for two years, on every subdomain, so nobody can downgrade a visit to plain HTTP.
Data protection
Wright Websites is the data controller for this site under UK GDPR. We use processors only to run the site and fulfil orders.
- Processors: Vercel (hosting), Supabase (database and file storage), Stripe (payments), Calendly (call booking) and our SMTP email provider.
- We do not sell personal data or add form submitters to marketing lists.
- Ask us to delete your data at any time by emailing websites@wrightwebsites.co.
- Retention and roles are described in the privacy policy.
Accessibility
We haven't yet carried out a full audit of this website against WCAG 2.2 AA, so we can't say how far it conforms. We'll update this section once we have.
Responsible disclosure
Found a security issue? Email websites@wrightwebsites.co with the details and steps to reproduce. We'll acknowledge within one working day. Please don't test against client sites. See /.well-known/security.txt.
Policies
Legal documents for this site and our services.