Privacy notice

Draft for review before launch. Version: 2026-10-draft.

Who is responsible

Proposed controller: FIXFIX LIMITED, company number 16425636, operating as Business Web Development. Contact: [privacy contact to be confirmed]. Registered office: 159 Marsh Road, Luton, United Kingdom, LU3 2QL.

Information and purpose

We use account email addresses, business and website details, launch approvals, domain requests, support correspondence and payment references to provide the service. Security logs and access records support account protection and incident investigation. Stripe handles payment details; the platform stores payment references and billing status rather than full card details.

Basis and providers

Proposed bases are performance of the service contract, legitimate interests in security and support, and legal obligations for required accounting records. These bases and any legitimate-interest assessment must be confirmed before launch. Supabase supports authentication and storage, Vercel hosts applications, Stripe processes payments and the configured email provider delivers service messages.

Retention

Website files have a 30-day recovery window after cancellation takes effect or suspension, followed by manual deletion review. This period does not define retention for customer accounts, invoices, approval records, backups or logs. Final retention periods for those records, backup expiry and provider deletion procedures must be completed before launch.

Account access and communications

Essential session cookies support sign-in and private previews. This platform does not include advertising analytics. Emails cover sign-in, purchases, service updates, billing and retention. Preview access and website publication can be restricted automatically based on access and payment status; customers can contact support for review.

Your rights

Depending on the applicable basis and circumstances, you may request access, correction, erasure, restriction or portability of personal information. You may object to processing based on legitimate interests. Contact us using the final privacy address above. You can also raise a concern with the UK Information Commissioner’s Office.

Before publication

Confirm hosting regions, provider roles, international transfers and safeguards, retention periods, required information and consequences of not supplying it, and handling of data submitted through individual customer websites. Customer website privacy notices are separate from this platform notice.

Drafting reference: ICO privacy information guidance.