Privacy Notice — One Website For You

1. Who we are

One Website For You ("we", "us", "our") is the controller of personal data collected through our website and services. If you have questions about this notice, contact us at onewebsiteforyou262@gmail.com or on 07901 066644.

2. What we collect

Contact details — name, email, phone number when you enquire or book.
Business details — information you share about your business so we can design and build your site.
Support messages — the content of emails, calls, and messages you send us.
Usage & device data — pages visited, referrer, browser type, IP address (via basic analytics).
Order data — Paddle (our payment processor) collects payment details directly; we receive a confirmation with amount, receipt email, and a transaction reference.

3. Why we use it

To respond to enquiries and deliver the website build you've booked (contract).
To manage payments, invoicing, and tax compliance via Paddle (contract / legal obligation).
To keep our service secure and prevent fraud (legitimate interests).
To improve our website and services (legitimate interests).
To send occasional updates about your project or, where you've opted in, marketing (consent).

4. Who we share it with

Paddle — our Merchant of Record. Paddle handles payments, subscription management, invoicing and tax compliance. See Paddle's privacy notice.
Hosting & infrastructure providers — we use reputable cloud providers to host this site and store project data.
Professional advisers — accountants and legal advisers where necessary.
Authorities — where required by law.

We do not sell your personal data.

5. International transfers

Some of our providers are based outside the UK/EEA. Where data is transferred, we rely on adequacy decisions or Standard Contractual Clauses to protect it.

6. How long we keep it

We keep enquiry and project data for as long as needed to provide the service and meet our legal obligations (typically up to 6 years for financial records). Data no longer needed is deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, email onewebsiteforyou262@gmail.com. We aim to respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

8. Security

We use appropriate technical and organisational measures — encryption in transit, access controls, and reputable infrastructure providers — to protect your data.

9. Cookies

We use only essential cookies needed to run the site and process bookings. If we add analytics or marketing cookies, we'll ask for your consent first.

10. Changes

We may update this notice from time to time. The "last updated" date above will change when we do.