Privacy policy

Two roles

We are the controller of your account data, such as your email and business details. We are the processor of enquiry data that your customers submit through your site, where you are the controller.

What we collect

Your account email, a hashed password, and the business information you give us to build your site: your trade, your services, your areas, your opening hours, your contact details and anything you upload.

About visitors to your site we record the page, the referrer, whether they tapped your phone number, and an opaque visitor value. We do not store their IP address or their browser's user agent.

How the visitor value works

It is a one way hash of the site, the visitor's network address and their browser, mixed with a secret that is regenerated every day and never written down. It lets us tell you how many people came yesterday without keeping anything that identifies one of them, and because the secret changes at midnight, yesterday's values cannot be matched to today's by us or by anybody who obtained the database.

The cost of that is honest and worth stating: somebody who visits on three days counts as three, so visitor numbers over a range are the sum of daily figures rather than distinct people.

No tracking cookies on your site

The website we build for you sets no cookies at all and loads no third party analytics, so your visitors get no consent banner because there is nothing to consent to.

We do use Google Analytics on kitso.co.uk, our own site, to see which pages bring us customers. It runs there and nowhere else, and it is never loaded on a site we build.

Retention and deletion

We keep data only as long as we need it to provide the service. A preview nobody decides on is deleted automatically. TODO: legal review to set the exact retention periods for enquiries, analytics and closed accounts, which are the three that need a number rather than a principle.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Ask from your portal or by writing to us, and we will answer within one month.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office.