Privacy
We keep as little as we can, we never sell it, and you can have it back or have it deleted whenever you ask.
Who we are
Site & Seond is a trading name of THE CAIRBON GROUP LIMITED, registered in England and Wales, company 12302771, VAT 341 9040 24, at 66 Paul Street, London EC2A 4NA. We are the data controller for the information described on this page. Write to us at hello@siteandseond.com.
What we hold about you
Account details. Your name, email address, business name, the domain of your website, the plan you chose and a hashed version of your password. We cannot read the password itself. We also keep the date you signed up, the date you last signed in, and the sign-in sessions currently open on your account, each with the IP address and browser it came from, so that we can lock out repeated failed sign-ins and sign every device out when you change your password.
Your site's visitor data. Our servers write a standard access log for each website we host. The visitor's IP address is shortened before it is written, so no full IP address is ever stored. From those logs we count, per day, visitors, page views, top pages, referring sites, device types and response times. Those daily totals are what you see in the app. They do not identify anyone.
Payment. When card payment is live it is taken by Stripe. Stripe receives your card details directly; we never see or store them. We keep the Stripe customer reference, the plan, and the invoices. Until Stripe is live we invoice you by email and you pay by bank transfer, and we keep the invoice.
Messages. Emails you send us, change requests you make in the app, and approvals you give on promotional assets, so that we have a record of what you asked for.
The content of your site and your assets. Text, images and files you give us or we make for you. They are yours; see Terms.
What we do not do
- No advertising or tracking cookies, on this site or in the app. The app sets a sign-in cookie and, if you have several sites, one that remembers which site you were looking at. This page sets none.
- No third-party analytics scripts. Everything on this site loads from this site.
- No selling, renting or sharing of your details for marketing. We do not send marketing email.
- No full IP addresses of your visitors, ever.
Your choice of language and currency is kept in your own browser, so the site remembers it next time you visit. It is never sent to us.
Why we hold it, and the lawful basis
- To provide the service you pay for (contract): building, hosting and maintaining your site, deploying SEO, making assets, and running your account in the app.
- To keep the service safe (legitimate interests): sign-in sessions, failed sign-in limits, backups and error logs.
- To keep the books (legal obligation): invoices and payment records, which UK tax law makes us keep for six years.
Where it is kept
On servers we rent in the European Union, and on encrypted backups. Stripe processes payments under its own privacy policy and standard contractual safeguards. Our email is hosted with a provider in Switzerland.
How long we keep it
- Account details: while your account is open, then deleted within 30 days of you closing it, apart from invoices.
- Invoices and payment records: six years, as the law requires.
- Daily site analytics: while we host the site. They come with you when you leave, if you want them.
- Sign-in sessions: 30 days after last use.
Who else sees it
Only people and providers who need it to run the service: our hosting provider (server rental only), Stripe (payment), and our email provider. Nobody else, unless the law requires it.
Your website's visitors
For your website, you are the controller and we are your processor. We host it, we shorten visitor IP addresses before anything is stored, and we count visits in aggregate. If your site collects anything itself (a booking form, say), that data belongs to you and we hold it only on your instruction. Put your own privacy notice on your site; we will write one for you if you ask.
Your rights
Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask for it in a portable form, and object to how we use it. Email hello@siteandseond.com and we will answer within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this page in a way that matters, we will email account holders first. The date at the top is the date of the latest version.