Privacy Notice
Last updated: 18 May 2026
1. Who we are
createmywebsite.co.uk is operated by [Your full legal name], a UK sole trader based in Lichfield, Staffordshire. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal data you provide to us.
Contact: hello@createmywebsite.co.uk
2. What personal data we collect
We collect only the data you give us when you enquire about, order, or use our service:
- Contact details: name, business name, phone number, email address, postal address
- Business details you submit through our intake form (services, hours, photos, testimonials)
- Photographs and other content you upload for use on your website
- Payment information processed by Stripe (we do not store full card details ourselves)
- Email correspondence between you and us
- Anonymised website usage data (visits, pages viewed) via Cloudflare Web Analytics — no cookies, no individual tracking
3. Why we use your data
We process your data only to:
- Quote, build, and deliver the website service you've ordered
- Communicate with you about your project, invoices, and care plan
- Process payments (via Stripe)
- Comply with our legal and tax obligations (HMRC, etc.)
- Improve our service based on aggregated, anonymised analytics
We do not sell your data, share it with marketers, or use it for advertising.
4. Legal basis
We rely on the following lawful bases under UK GDPR Article 6:
- Contract (Art. 6(1)(b)) — to deliver the website service you've ordered.
- Legitimate interests (Art. 6(1)(f)) — to respond to enquiries and improve our service.
- Legal obligation (Art. 6(1)(c)) — to keep accounting records as required by HMRC.
5. Who we share your data with
We use a small number of trusted third-party services. Each handles only what's needed for their role:
- Cloudflare — hosts our site and your website, provides cookie-free analytics
- GoDaddy — registers our domain and provides our business email (via Microsoft 365)
- Microsoft — runs the email service behind hello@createmywebsite.co.uk
- Stripe — processes deposits and payments securely
- Resend — sends transactional emails (intake form notifications, payment confirmations)
- GitHub — stores the source code and content of your website (private repositories)
We will share your data with HMRC, our accountant, or other authorities only where legally required.
6. How long we keep your data
- While we're actively working with you, and for the duration of your care plan
- Financial records: 6 years after the end of the relevant tax year (HMRC requirement)
- General enquiries that don't lead to a contract: 12 months from last contact
7. Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you
- Have inaccurate data corrected
- Request deletion of your data (where we have no overriding obligation to keep it)
- Restrict or object to how we use your data
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where consent was the basis for processing
To exercise any of these, email hello@createmywebsite.co.uk. We'll respond within one calendar month.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies and tracking
We use Cloudflare Web Analytics, which is cookie-free and does not track individuals. No advertising cookies, no third-party trackers. That's why you don't see a cookie banner — there's nothing to consent to.
Note: if your own client website (built by us) uses additional features that set cookies, that's covered by your own privacy notice on your own site.
9. International transfers
Some of our service providers (Stripe, Cloudflare, GitHub, Microsoft, Resend) are based outside the UK. Where data is transferred outside the UK, those providers offer appropriate safeguards under UK GDPR (typically EU-US Data Privacy Framework or Standard Contractual Clauses).
10. Changes to this notice
We may update this notice from time to time. Material changes will be notified by email to active clients. The "Last updated" date at the top reflects the most recent version.