Legal

Privacy policy

Last updated: 1 January 2027

Draft. Every blank is filled in and supplier checks are done. It should still be reviewed by a solicitor before you go live.

The short version

We collect the details you give us to build your website, plus what we need to bill you. We use them to run the service, and we don't sell them. You can ask to see, correct or delete your data at any time by emailing hello@guidedsites.com. This summary is for orientation only, the sections below are what apply.

1. Who we are

Guided Sites is a service operated by Guided Sites Ltd, a company registered in England and Wales (company number 17410089) at 21 Broadhinton Road, London, SW4 0LU. For the personal data described in this policy we are the data controller. You can reach us at hello@guidedsites.com.

2. What we collect

Details you give us for your website. Your name, business or practice name, job title, qualifications, professional body membership, years in business, biography, services and fees, testimonials, photographs, location, email address, phone number and any booking link. Because this content is published on your website, it is public once your site goes live.

Account and billing details. Your name, email address, billing address and subscription history. Card details are handled by our payment processor, Stripe, and are not stored by us.

Support correspondence. Emails and messages you send us, and our replies.

Technical data. IP address, browser type and pages visited, collected when you use guidedsites.com. See section 9 on cookies.

3. Why we use it, and our legal basis

To build, publish and host your website, performance of our contract with you.

To take payment and manage your subscription, performance of our contract, and our legal obligation to keep accounting records.

To provide support and respond to you, performance of our contract, and our legitimate interest in running the service well.

To keep the service secure and prevent misuse, our legitimate interest in protecting the service and its users.

To send you service emails (renewals, changes, outages), performance of our contract. Marketing emails, if we send any, go only to people who have opted in, and every one carries an unsubscribe link.

4. Enquiries from your website visitors

Guided Sites websites do not carry contact forms. Your site displays your email address as a clickable link, so when a visitor gets in touch the message goes from their email app straight to your inbox. It does not pass through us, and we never see it, store it or have access to it. That means we hold no data about your clients at all, which matters if you work in a regulated or confidential field. You remain responsible for telling your own clients how you handle their information once it reaches you.

5. Who we share it with

We do not sell your personal data. We share it only with the suppliers we need to run the service:

Lovable Cloud, hosting for your website, its database and any photographs you upload, and sending of service emails such as renewal reminders and confirmations. Lovable Cloud stores account and website data with Supabase, its database provider.

Stripe, card payments and subscription billing.

Cloudflare, domain registration and DNS where you buy or connect a domain through us.

We may also disclose data where the law requires it, or to establish or defend legal claims.

6. Where your data is held

Our payment processor, Stripe, may process data in the United States. Stripe is certified under the UK Extension to the EU–US Data Privacy Framework, and its UK data processing agreement also includes the UK International Data Transfer Addendum.

Account and website data is stored with Supabase (through Lovable Cloud) in a UK or European data centre, so it stays out of the United States. Service emails are sent by Lovable, which may process your email address in the United States under the safeguards in its data processing terms.

Cloudflare handles domain registration and DNS where you buy or connect a domain through us. Cloudflare is certified under the UK Extension to the EU–US Data Privacy Framework.

7. How long we keep it

We keep your website content and account details for as long as you have a subscription. If you cancel, we keep them for six months so that you can pick up where you left off if you come back, after which the site and its content are deleted. Billing and accounting records are kept for six years, as UK tax law requires. Support correspondence is kept for two years.

8. Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider. You can object to processing we carry out on the basis of legitimate interests, and withdraw consent where you have given it.

We welcome customers outside the UK, currently Ireland, the United States, Canada, Australia and New Zealand. We handle everyone's data to the UK standard described in this policy, wherever you live. If your own country's law gives you additional rights, you can use those too, just ask.

Email hello@guidedsites.com and we will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would rather you came to us first.

9. Cookies

guidedsites.com only uses cookies and similar storage that are strictly necessary for the site to work. These keep you logged in to your dashboard and protect payments against fraud. Stripe sets cookies on the checkout page for this purpose. We do not use analytics, advertising or tracking cookies, so we do not ask for consent. If that changes, we will update this policy and ask for your permission first.

10. Security

We use encrypted connections, restrict access to your data to those who need it, and choose suppliers who maintain recognised security standards. No service can promise perfect security, but if a breach affects your rights we will tell you and the ICO as the law requires.

11. Children

Guided Sites is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

12. Changes to this policy

If we change this policy we will update the date at the top, and email you where the change materially affects you.

Questions about any of this: hello@guidedsites.com