Privacy Policy
GB Sites Ltd (trading as Great British Sites)
Last Updated: March 2026
Who We Are
Our website address is: https://greatbritishsites.co.uk/
We are GB Sites Ltd, trading as Great British Sites, a website design, hosting and SEO company based in the United Kingdom.
Contact Details
- Email: admin@greatbritishsites.co.uk
- Companies house registration: GB SITES LTD
- GB Sites Ltd ICO Registration Number: [Add here]
What Personal Data We Collect and Why We Collect It
Contact Forms
When you submit an enquiry through our contact form, we collect the following information:
- Your name
- Your email address
- Your preferred package and any add-ons selected
- A description of your project
This information is collected solely to allow us to respond to your enquiry and discuss your requirements. We do not use your name or email address for marketing purposes. We use WP Mail SMTP to route contact form submissions to our email inbox.
We retain contact form enquiry data for a period of 12 months, after which it is deleted.
Client Project Data
During the website build process, clients may supply us with:
- Logo files and branding assets
- Written content and images for their website
- Business information relevant to their site
This information is used solely to build and deliver the agreed website. It is retained for the duration of the contract and for 12 months following project completion, after which it is securely deleted unless otherwise agreed.
WordPress Accounts
For clients on our ‘You Manage It’ package, a WordPress user account will be created. This account will contain your name and email address and will allow you to log in and manage your website content.
Clients on the ‘We Manage It’ package, will not be issued a WordPress account. Any content changes must be requested by contacting us directly.
Please Note *: Clients are never granted access to our hosting server, for the security of all websites we host.
Domain Registration
When we purchase a domain on your behalf, or transfer an existing domain on our hosting environment, we will process the relevant domain registration details. This data is held for the duration of the hosting agreement.
Payments
We use Stripe to process monthly subscription payments for our website packages. When you sign up to a package, payment is taken via Stripe prior to development beginning. Your monthly payment will continue as a recurring charge, which you may cancel at any time by providing us with written notice to admin@greatbritishsites.co.uk. We require [X days/weeks] notice before your next billing date to cancel without further charge.
Stripe processes payment data on our behalf. We do not store your card details. Stripe is PCI-DSS compliant and handles all payment data securely. Please refer to Stripe’s privacy policy at stripe.com/gb/privacy for details of how they handle your data.
Payments received are held in GB Sites Ltd’s business bank account. We do not share your payment data with any third parties beyond Stripe.
Cookies
Our website uses cookies as set by WordPress by default. Some of our plugins may also set cookies. These are used to ensure the website functions correctly.
You will be notified of cookie usage via a cookie notice on your first visit to our site.
Analytics
We do not currently use any third-party analytics platform. If this changes, the policy will be updated accordingly.
Who We Share Your Data With
We do not sell, rent, or trade your personal data. We may share limited data with the following third-party providers as necessary to deliver our services:
- WP Mail SMTP – Used to route contact form submission to our email inbox. Please refer to WP Mail SMTP’s own privacy policy for details of how they handle data.
- WordPress.org – Our websites are built on the WordPress platform.
- Domain registrar – Where we purchase or manage a domain on your behalf, your domain registration details may be shared with GoDaddy, our domain registrar. Please note that GoDaddy is a US-based company and your data may be transferred outside the United Kingdom. GoDaddy is responsible for ensuring appropriate safeguards are in place in accordance with UK GDPR. Please refer to GoDaddy’s privacy policy for further details.
- Stripe – Used to process monthly subscription payments. Stripe is a US-based company operating under appropriate data transfer safeguards. Please refer to Stripe’s privacy policy at stripe.com/gb/privacy for further details.
How Long We Retain Your Data
We retain your personal data only for as long as is necessary for the purposes for which it was collected:
- Contact form enquiries: 12 months from the date of submission
- Active client project data: For the duration of the project and 12 months following completion
- WordPress user accounts: For the duration of the hosting agreement, or until the clients request deletion
- Domain registration data: For the duration of the hosting agreement
- Email correspondence: 12 months following the conclusion of the project or enquiry
- Payment records: 7 years in accordance with HMRC requirements
What Rights You Have Over Your Data
Under UK GDPR, you have the following rights regarding your personal data:
- The right to access – You can request a copy of your personal data we hold about you
- The right to rectification: You can ask us to correct inaccurate data
- The right to erasure: You can ask us to delete your personal data, subject to any legal obligations we have to retain it.
- The right to restrict processing: You can ask us to limit how we use your data
- The right to data portability: You can ask us to provide your data in a portable format
- The right to object: You can object us processing your data in a certain circumstances
To exercise any of these rights, please contact us at: admin@greatbritishsites.co.uk
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
Where Your Data Is Sent
Your data is stored on our server hosted within the United Kingdom. Contact form data is routed via WP Mail SMTP. If WP Mail SMTP processes data outside the UK, they are responsible for ensuring appropriate safeguards are in place in accordance with UK GDPR.
Please note that GoDaddy (our domain registrar) and Stripe (our payment processor) are both US-based companies. Both are responsible for ensuring appropriate safeguards are in place for any data transferred outside the United Kingdom. Please refer to their respective privacy policies for further details.
How We Protect Your Data
We take the security of your personal data seriously. Measures we have in place include:
- Client websites and data are hosted on our private server, to which clients are never granted direct access
- Payment data is handled entirely by Stripe and is never stored on our systems
- Access to client data is restricted to authorised personnel only
- We do not store card details or sensitive financial information
Data Breach Procedures
In the event of a personal data breach, we will assess the risk to individuals and, where required, notify the ICO within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to the rights and freedoms of individuals, we will also notify those individuals directly without undue delay.
Automated Decision Making
We do not carry out any automated decision making or profiling using your personal data. All decisions relating to your project and account are made by a member of our team.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
GB Sites Ltd (trading as Great British Sites) Email: admin@greatbritishsites.co.uk Address: [Your registered address] ICO Registration Number: [Add once registered]