Draft for solicitor review. This page is here so the site is not silent on privacy, cookies or the contract. It is not legal advice and it is not the final wording.
Privacy notice
Status of this notice
This privacy notice is a draft for solicitor review. It explains what this platform collects. Complete the controller's registered details before it is treated as the live notice.
Who is the controller
The controller is [Add registered company name], trading as The Web Designers, company number [Add company number], registered office [Add registered office address]. Contact hello@thewebdesigners.co.uk. Nick Groves is the person responsible day to day. Square brackets mark details that are not filled in yet.
What we collect
From the homepage preview: business name, niche, location, services, optional colours and logo, your email, and whether you ticked the marketing box. From checkout: your name, email, password hash, the plan, and the confirmation that you are buying for a business. From setup: the content of the site, domain preferences, and files you upload. From the client area: edit requests and enquiries submitted on a site we host. From the lead intake used by a future lead-finding tool: company, contact, source, legal form, and the lawful basis or consent note you send. We store a Google place ID only when one is supplied. We do not store Google Places addresses, phone numbers, ratings or coordinates.
Why we use it
We use account and website data to provide the contract. We use the preview email to send the preview you asked for, which is a service message, not marketing. Marketing email is sent only if you tick the consent box, or, for an existing customer, where a soft opt-in lawfully applies to our own similar services. We email limited companies and LLPs about this service on the basis of legitimate interests, with an opt-out in every message. We do not email sole traders or ordinary partnerships without recorded consent. Invoices are kept so we can meet tax duties.
How long we keep it
Preview drafts are kept for up to 24 months. Account and site data are kept for the life of the plan and then for up to six years where we need them for tax or a dispute. Leads are kept until you opt out, or for 24 months from the last message, whichever comes first. Opt-out records are kept so we can honour them. Server logs follow the host's usual retention.
Who else sees it
Processors depend on which keys are switched on: Stripe for payments, the email provider (Resend or Postmark), the hosting company (20i, if connected), and an LLM provider for drafting copy. Each is used only to provide the service. We do not sell personal data.
Where it is processed
Some of those providers process data outside the UK. Where that happens we rely on the UK transfer mechanisms those providers offer, such as the International Data Transfer Agreement or an adequacy decision. A solicitor should list the actual providers once the accounts are opened.
Your rights
You can ask for a copy of your personal data, a correction, deletion, or a restriction, and you can object to legitimate-interest processing, including business email. Where we rely on consent, you can withdraw it. You can complain to the Information Commissioner's Office. Email the address above and we will respond within one month in the usual case.