1. Who we are

Site4Us operates the site4us.com platform. This policy explains what personal data we collect, how we use it, and your rights. If you have questions, email us at hello@site4us.com.

2. What data we collect

We collect the following categories of personal data:

Account data — your email address and password (hashed), set when you register.
Profile & content — names, photos, videos, captions, and other content you upload to build your site.
Billing data — payment information is handled by our third-party payment processor. We do not store your card details.
Usage data — pages visited, features used, browser type, and IP address, collected via analytics tools.
Communications — emails you send us and any support correspondence.

3. How we use your data

We use your data to:

Provide, maintain, and improve the Site4Us service
Process payments and manage your subscription
Send transactional emails (receipts, account notices)
Respond to support requests
Detect and prevent fraud or abuse
Comply with legal obligations

We do not sell your personal data to third parties.

4. Legal basis (UK GDPR)

We process your data under the following legal bases:

Contract — to deliver the service you signed up for
Legitimate interests — to improve the product and prevent abuse
Legal obligation — where required by law
Consent — for optional marketing emails (you can opt out at any time)

5. Third-party services

We use trusted third-party providers to operate Site4Us, including:

Supabase — database and authentication
Vercel — hosting and infrastructure
Payment processor — secure payment handling

These providers are bound by their own privacy policies and data processing agreements. We only share data with them as necessary to provide the service.

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Data portability
Withdraw consent at any time (where consent is the basis)

To exercise any of these rights, email hello@site4us.com. We will respond within 30 days.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to keep it for legal or financial compliance reasons.

8. Cookies

We use essential cookies to keep you signed in and remember your preferences. We may also use analytics cookies to understand how the site is used. You can disable cookies in your browser settings, though some features may not work correctly.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notice when we make significant changes. Continued use of Site4Us after changes take effect constitutes acceptance.

11. Contact & complaints

For any privacy concerns, email hello@site4us.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.