Legal
Privacy Policy & GDPR Notice
How we handle your personal data, in plain English. Last updated 27 August 2026.
1. Who we are
FoundOnSite ("we") is the data controller for the personal data you give us when you ask about or buy our services. We're based in the UK and follow the UK GDPR and the Data Protection Act 2018.
2. What we collect and why
We only collect what we need, and we use it for clear reasons:
- Contact details (name, email, phone, town): to answer your enquiry and quote for work. This is our "legitimate interest" in running a business.
- Business details (trade, services, service areas): to build your website and list your business online.
- Payment information: processed by our card or direct debit provider; we never store full card numbers.
- Basic website analytics (page views, device type): to see what works and improve our own marketing, via a privacy-friendly, cookieless analytics tool.
3. Cookies
This site uses minimal cookies. We may set a single functional cookie to remember that you've dismissed a notice, and a privacy-respecting analytics tool that doesn't track you across other sites. We don't use advertising or tracking cookies, and we don't sell your data.
You can clear cookies in your browser settings at any time; doing so won't stop the site working.
4. Who sees your data
We don't share your personal data with anyone except where it's needed to deliver the service: our payment processor, your domain and hosting provider, and any tool we use to publish your site (such as a Google Business Profile). Each of these only gets what they need to do their job, and they have their own privacy policies.
We will never sell your data, and we never share it for marketing with third parties.
5. How long we keep it
We keep your data only for as long as we need it. If you ask for a quote and don't go ahead, we delete your enquiry details after 12 months. If you become a client, we keep records for as long as needed for tax and legal reasons (usually 6 years), then delete them.
6. Your GDPR rights
Under UK GDPR you have the right to:
- See what data we hold about you (a "subject access request").
- Ask us to correct anything that's wrong.
- Ask us to delete your data where we have no legal reason to keep it.
- Object to us using it for a specific purpose.
- Get a copy of your data in a portable format.
To use any of these rights, email us at hello@foundonsite.co.uk. We'll respond within 30 days.
7. Security
We take reasonable steps to protect your data: encrypted transfers, access limited to the people who need it, and regular backups. No system is perfectly secure, but we treat your data the way we'd treat our own.
8. If something goes wrong
If you think we've mishandled your data, tell us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
9. Changes to this policy
We may update this policy from time to time. For material changes we'll tell active clients by email. The "last updated" date at the top always reflects the current version.
10. Contact
Questions about your data? Email hello@foundonsite.co.uk or use the contact form on the Get a Site page.