Privacy Policy
1. Who we are
FreeWebsites is operated by FreeWebsites, based in Swansea, Wales, United Kingdom. We are the data controller for all personal data collected through this website and our services.
For any privacy-related questions or requests, please contact us at contact@freewebsites.pro.
2. What data we collect and why
We only collect data that is necessary to deliver our services or respond to your enquiries. Here is what we collect and the legal basis under UK GDPR:
Enquiry data — When you complete our website enquiry form, we collect your name, email address, phone number, business name, business type, and any notes you provide. This is used to respond to your enquiry and build your website. Legal basis: legitimate interest and contract performance.
Contact form data — When you use our contact form, we collect your name, email address, subject line and message. This is used solely to reply to your message. Legal basis: legitimate interest.
Payment data — When you purchase a hosting plan, payment is processed by Paddle (our payment processor and merchant of record). We receive confirmation of payment and your plan selection. We do not store or have access to your card details. Legal basis: contract performance.
Technical data — Basic server logs (IP address, browser type, pages visited) are retained automatically by our hosting provider for security and performance purposes. Legal basis: legitimate interest.
3. Third-party data processors
We use the following trusted third-party services to operate FreeWebsites. Each acts as a data processor on our behalf. Where data is transferred outside the UK, appropriate safeguards apply (EU Standard Contractual Clauses or UK adequacy decisions).
| Processor | Purpose | Privacy policy |
|---|---|---|
| Supabase | Database hosting — stores enquiry and customer records securely | supabase.com/privacy |
| Paddle | Payment processing — acts as merchant of record for all transactions | paddle.com/legal/privacy |
| Netlify | Website hosting and contact form submissions | netlify.com/privacy |
| Resend | Transactional email delivery (confirmations and notifications) | resend.com/legal/privacy-policy |
| Google Fonts | Font loading — your IP address may be transmitted to Google's servers | policies.google.com/privacy |
4. How long we keep your data
- Enquiry data: Retained for up to 2 years from submission, or until you request deletion.
- Customer data: Retained for the duration of your contract plus 7 years (as required by UK accounting and tax law).
- Contact form messages: Retained for up to 12 months, then deleted.
- Technical logs: Retained for up to 90 days by our hosting provider.
5. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — You can request a copy of the personal data we hold about you.
- Right to rectification — You can ask us to correct inaccurate or incomplete data.
- Right to erasure — You can request deletion of your personal data, subject to our legal obligations.
- Right to restrict processing — You can ask us to pause processing of your data in certain circumstances.
- Right to object — You can object to processing based on legitimate interest.
- Right to data portability — You can request your data in a structured, machine-readable format.
To exercise any of these rights, email us at contact@freewebsites.pro with your request. We will respond within 30 calendar days.
6. Cookies
This website uses minimal cookies. We do not use tracking, advertising or analytics cookies.
- Session data: Temporary browser session storage is used to carry your chosen plan and promotional code from the pricing page to checkout. This data is not transmitted to any third party and is cleared when you close your browser tab.
- Paddle: Sets cookies when you access our checkout page for payment processing purposes. See Paddle's privacy policy for details.
- Google Fonts: May set browser cache entries when loading fonts. No tracking is performed.
7. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our database is access-controlled, all data is transmitted over HTTPS, and admin access requires secure session authentication.
No method of transmission over the internet is 100% secure. If you become aware of a potential security incident, please notify us immediately at contact@freewebsites.pro.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. We encourage you to review this page periodically. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
9. Complaints
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
We would appreciate the opportunity to address your concern first, so please contact us at contact@freewebsites.pro before escalating to the ICO.