SitesFlow
Privacy notice.
This notice explains what personal information SitesFlow collects through this website, why, and what your rights are. We keep it to what we need.
1. Who is responsible for your information
Chad Ward (trading as SitesFlow) is the “controller” of the personal information described here. You can contact us using the form on our website.
2. What we collect and why
- Enquiries. If you use our contact form we receive your name, email address and message. We use them only to reply to you. Our legal basis is our legitimate interest in answering your enquiry (and, if you go on to buy, performing our contract with you).
- Orders. When you buy, Stripe takes your payment and passes us your name, email address, billing details and what you bought. We use them to deliver your website, send your receipt, handle any problem with your order and keep our accounts (a legal requirement). We also use the business name and details you give us to set your website up.
- Technical information. Like any website, our server sees your IP address and browser details when you visit. We use these for security, to stop spam and to limit repeated form submissions.
We do not sell your information, and we do not use it for automated decisions or profiling.
3. Who else sees it
- Stripe processes payments (Stripe’s privacy policy). We never see or store your full card number.
- Our email and web hosting providers handle the messages and data we store for you and for us.
- Google Fonts supplies the fonts on this site, so your browser contacts Google when a page loads.
- Cloudflare Turnstile may check that a form is being filled in by a person and not a robot.
Some of these providers may process information outside the UK. Where they do, it is under the safeguards the law requires.
4. Cookies
This website does not use advertising or tracking cookies. The only thing that may be stored in your browser is what is strictly necessary for the site (for example, keeping the owner signed in to the admin area).
5. How long we keep it
We keep enquiries only for as long as we need them to reply and deal with any follow-up. We keep order and payment records for as long as the law requires for accounting (normally six years). Then we delete them.
6. Your rights
Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive a copy of it. To do any of these, use the contact form and we will reply within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk — but please tell us first so we can put it right.
7. If you buy a website from us
Once your website is yours, you run it. If it collects enquiries or bookings from your own customers, you become responsible for that information and should have your own privacy notice on your site. Each website comes with a starter privacy page you can edit; please make sure it is correct for your business.
8. Changes
We may update this notice. The date at the top shows when it last changed.