Privacy Policy

What data we collect

When you use our onboarding form, we collect:

• Full name
• Email address
• Mobile number (if provided)
• Business name, type, and area served
• Whether you have a domain and/or logo/photos
• Any optional notes you submit

We also collect payment information through Stripe (our payment processor). We do not store card numbers on our servers.

Why we collect it

• To build your website as described in our service
• To process your subscription payment
• To communicate with you about your order and ongoing service
• To improve our service (anonymised, aggregated data only)

How we store your data

Your data is stored securely using trusted systems with access restricted to authorised personnel only. We use encryption in transit and apply appropriate security controls to protect stored data.

How long we keep it

We retain your data for the duration of your active subscription plus 12 months after cancellation. After this period, we delete your personal data unless required by law to retain it longer.

Third-party sharing

We share your data only with:

• Stripe, to process your subscription payments. Stripe’s privacy policy applies to their handling of your payment data.
• Secure data storage providers, used only where needed to store and process customer information safely.

We do not sell your data to third parties. We do not share your data with marketing companies.

Cookies

We use a single essential item of local storage to remember your cookie choice so we do not ask you on every visit. Nothing else is set unless you opt in.

If you accept marketing and analytics cookies, we load two things. The Meta (Facebook) Pixel, which sets cookies used to measure the performance of our adverts. And PostHog, a product analytics tool, so we can see what people actually find useful on this site.

PostHog records: which pages you visit, which links and buttons you click, how far down a page you scroll and general mouse or touch movement across the page (combined with everyone else's to build anonymous heatmaps), and how quickly pages load and respond on your device.

It is configured for analytics only. We do not record your screen or replay your session, we do not capture what you type, and we do not use it to identify you personally. Its data is processed on servers in the EU. Both tools are only loaded after you give explicit consent via our cookie banner. You can change your choice at any time using the Cookie preferences link at the bottom of any page.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time

Contact

For any privacy-related queries or to exercise your rights, contact us at: hello@madilldigital.co.uk

Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.