1. Who we are

Site4Us operates the site4us.com platform. This policy explains what personal data we collect, how we use it, and your rights. If you have questions, email us at hello@site4us.com.

2. What data we collect

We collect the following categories of personal data:

Account data — your email address and password (hashed), set when you register.
Profile & content — names, photos, videos, captions, and other content you upload to build your site.
Billing data — payment information is handled by our third-party payment processor. We do not store your card details.
Usage data — pages visited, features used, browser type, and IP address, collected via analytics tools (PostHog and Google Analytics) only if you allow analytics cookies.
Communications — emails you send us and any support correspondence.

3. How we use your data

We use your data to:

Provide, maintain, and improve the Site4Us service
Process payments and manage your subscription
Send transactional emails (receipts, account notices)
Respond to support requests
Detect and prevent fraud or abuse
Comply with legal obligations

We do not sell your personal data to third parties.

4. Legal basis (UK GDPR)

We process your data under the following legal bases:

Contract — to deliver the service you signed up for
Legitimate interests — to improve the product and prevent abuse
Legal obligation — where required by law
Consent — for optional marketing emails (you can opt out at any time)

5. Third-party services

We use trusted third-party providers to operate Site4Us, including:

Supabase — database and authentication
Vercel — hosting and infrastructure
Payment processor — secure payment handling

These providers are bound by their own privacy policies and data processing agreements. We only share data with them as necessary to provide the service.

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Data portability
Withdraw consent at any time (where consent is the basis)

To exercise any of these rights, email hello@site4us.com. We will respond within 30 days.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to keep it for legal or financial compliance reasons.

8. Cookies

We use essential cookies to keep you signed in and remember your choices. Analytics and marketing cookies stay off until you choose them. With analytics enabled, we record your first public landing page, a broad source such as search or an AI referral, and anonymous steps such as opening the builder or starting checkout. We connect those details to a payment only after Stripe confirms it. We do not include search-query text, private gift URLs, names or email addresses in this attribution. Acquisition details are kept in an optional browser cookie for up to 30 days. Marketing cookies help measure advertising. Use Cookie settings to change or withdraw your choices at any time.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notice when we make significant changes. Continued use of Site4Us after changes take effect constitutes acceptance.

11. Contact & complaints

For any privacy concerns, email hello@site4us.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.