DRAFT for review. Not legal advice. Have this checked before publishing (for example by a solicitor, or against the ICO's free small-business privacy notice generator). Fill in every item marked TO ADD.
Privacy policy
Last updated: TO ADD (DD/MM/YYYY)
This policy explains how Big Yellow Fishes Ltd, trading as freewebsites.io ("we", "us"), collects and uses personal information when you enquire about, sign up for or use our website service.
Who we are
- Company: Big Yellow Fishes Ltd, registered in England and Wales, company number TO ADD
- Registered office: TO ADD
- Email: hello@freewebsites.io
- ICO registration number: TO ADD (most businesses that handle customer data must pay the ICO data protection fee: ico.org.uk/fee)
We are the "controller" for the information described here.
What we collect
- Contact details: your name, role, phone, mobile, WhatsApp number, email and the best time to call.
- Business details: business name, address, areas you cover, opening hours, company and VAT numbers, services, prices, qualifications and anything else you put in our onboarding form.
- Content for your website: your logo, photos, testimonials and the text you send us. If photos show other people, or testimonials name customers, you confirm you have their permission.
- Billing details: handled by Stripe. We see your card type, last four digits and expiry date, never the full card number.
- Records of our contact with you: calls, emails, messages, notes, edit requests and your consent to be contacted.
- Technical details: when you use the onboarding form or preview link we record the date, time, IP address and browser type, to keep a record of your consent and to prevent misuse.
- If you came from a Facebook advert: the details you entered in the Facebook form.
- If you choose the quick start: the public parts of the social media pages you give us (your page name, bio and profile picture, as anyone can see them without logging in), and, if you pick your business on Google, the address, phone number, opening hours and star rating from your Google listing. We don't log into your accounts or read private messages.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and calling you back | Legitimate interests (you asked us to) |
| Building your draft website and sending you a preview | Steps before entering a contract |
| Running your subscription, hosting, support and edits | Contract |
| Taking payments and keeping accounting records | Contract and legal obligation |
| Payment receipts, renewal reminders, cancellation confirmations | Legal obligation and contract |
| Monthly website report emails (you can switch these off) | Legitimate interests |
| Asking for a review, or telling you about related services | Legitimate interests (you can opt out at any time) |
Who we share it with
We only share what's needed, with suppliers who protect it:
- Supabase (database and file storage, London region)
- Vercel (hosts our dashboard)
- Stripe (payments)
- Resend (sends our emails)
- 20i (hosts your website)
- Google (only if you use "Find my business on Google" in the quick start: we send your business name and town to look up your listing)
- Trigger.dev (runs scheduled checks such as uptime monitoring)
- Anthropic (only if we use AI to help draft website text from your answers; your answers aren't used to train their models) TO CONFIRM before launch
- A freelance website builder working for us, under a confidentiality agreement
Some of these suppliers may process data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Addendum.
We never sell your information.
How long we keep it
- Enquiries that don't go ahead: 12 months from our last contact, then deleted.
- Customers: for as long as you're a customer, then 6 years after you leave (UK tax and accounting rules require billing records to be kept this long). Website content and photos are deleted within 90 days of cancellation unless you ask us to keep them for an export.
Your rights
You can ask us to:
- give you a copy of your information
- correct it
- delete it (unless we must keep it by law)
- stop or limit how we use it
- give it to you in a format you can take elsewhere
- stop sending you marketing (at any time)
Email hello@freewebsites.io. We'll reply within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113. We'd appreciate the chance to sort it out first.
Cookies
Our onboarding form and preview pages only use cookies that are strictly necessary for them to work. We don't use advertising or tracking cookies.
Changes
We'll update this page if anything changes and tell customers by email about important changes.