Last updated: 20 June 2026
This policy explains how SiteSmart collects, uses and looks after your personal data when you contact us, become a customer, or use a website we host and manage. We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.
Who we are
SiteSmart is a sole trader business operated by Stuart Boyle, providing website design and managed website services to small businesses in the UK. For the purposes of data protection law, SiteSmart is the “data controller” for the personal data described in this policy.
You can contact us about privacy or your data through our contact page, or by post at SiteSmart UK, 293, IP11 9DZ.
We are registered with the Information Commissioner’s Office (ICO), registration number ZC178623.
The personal data we collect
Depending on how you interact with us, we may collect:
- Enquiry details — your name, email address, phone number (if you give it) and the contents of any message you send us through our contact form or by email.
- Customer and billing details — your name, business name, contact details, billing address and the details of the services you buy from us. Card payments are handled securely by Stripe; we do not see or store your full card number.
- Domain and website information — the details needed to register and manage your domain name, and information relating to the website we host and maintain for you.
- Website usage data — when you visit sitesmart.uk, we may collect basic analytics such as pages viewed, approximate location, device and browser type, through cookies and similar technologies (see below).
How we use your data, and our lawful basis
- To respond to your enquiry, on the basis of our legitimate interest in answering people who get in touch.
- To provide our services — to build, host, manage and support your website and manage your domain, on the basis of performing our contract with you.
- To take payment — to process your subscription and invoices, on the basis of performing our contract and complying with our legal and accounting obligations.
- To improve our website — to understand how visitors use sitesmart.uk, on the basis of your consent (for analytics cookies).
- To meet legal obligations — for example, keeping records required by tax law.
Cookies and analytics
Our website uses cookies to help it work and, with your consent, to measure how it is used. We use Google Analytics to collect anonymous, aggregated statistics about visits. You can refuse or withdraw consent to non-essential cookies at any time through your browser settings or any cookie controls shown on the site. Google processes this data on our behalf; see Google’s own privacy information for details.
Who we share your data with
We do not sell your data. We share it only with trusted providers who help us run our service, and only as far as needed:
- Stripe — to process payments securely.
- Google (Analytics) — to provide website usage statistics.
- Our domain registrar (eNom) — to register and manage domain names on your behalf.
- Cloudflare — to protect our contact form from spam and abuse (Turnstile).
- Our hosting and email providers — to host your website and handle email.
We may also disclose data when required by law.
International transfers
Some of our providers (such as Stripe and Google) may process data outside the UK. Where they do, they are required to protect it to a standard equivalent to UK law, using appropriate safeguards such as the UK’s International Data Transfer Agreement or equivalent.
How long do we keep your data?
We keep enquiry data only as long as needed to deal with your enquiry and for a reasonable period afterwards. We keep customer and billing records for as long as you are a customer and for at least six years afterwards to meet our legal and tax obligations. We delete or anonymise data when it is no longer needed.
Websites we manage for you
When we host and manage a website for you, it may collect personal data from its visitors (for example, through its contact forms). In that case, you are the data controller for your visitors’ data, and we act as your data processor, handling it only on your instructions as part of providing our service. If you need a formal data processing agreement, just ask.
Your rights
Under data protection law, you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data, where there is no overriding reason to keep it;
- restrict or object to how we use your data;
- ask for a copy of your data in a portable format; and
- Withdraw consent at any time, where we rely on it.
To exercise any of these, contact us through our contact page. We will respond within one month.
How we protect your data
We use appropriate technical and organisational measures to keep your data secure, including encrypted connections (SSL), secure payment processing through Stripe, and limiting access to your information.
Complaints
If you have a concern about how we handle your data, please contact us first, and we will do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.