Sitework is a web design and local search service for UK trade businesses. We collect only the information needed to deal with an enquiry and, if you become a client, to deliver and support your website and search work.
1. Who is responsible for your data?
Sitework is operated by Jacob Orsborn-Smith, a sole trader trading as Sitework in the United Kingdom, at 111 Heene Road, Worthing, West Sussex, BN11 4PH. We are the data controller for the information described in this policy.
For privacy questions or to exercise your rights, email support@sitework.uk. Coursework by Sitework has its own course privacy notice.
2. What we collect
Enquiry forms. When you ask for mockups, a free Maps check or SEO help, we collect what you enter. Depending on the form, that is your name, mobile number, email address if you give it, business name, trade, area, current website, Google Business Profile link, the search you want to win, where you think you rank, your answers about your current setup and priorities, and any notes. We use them to prepare the mockups, check or diagnosis you asked for and to reply to you.
Client onboarding and delivery. If you become a client, we hold the business details, photos, copy, prices and other material you send us, including through our client intake form, plus the access you give us to your domain, Google Business Profile, Google Search Console or similar accounts. We use them only to build, run and improve your website and search work.
Signing your agreement. When you sign online, we record the name you type, your signature, the email address the link was sent to, and the time, IP address and device used, so there is a reliable record of who agreed to what. We email you a copy.
Payments. Plan payments are taken through Stripe. Stripe collects your card or bank details directly. We see your name, email, amounts, dates and payment status, never your full card number.
If we contacted your business first. We sometimes contact trade businesses that could benefit from a better website. For that we use business information that is already public, such as your business name, trade, area, website, and the business phone number or email shown on your website or Google Business Profile. We may also prepare an unsolicited mockup based on your public website. You can ask us to stop at any time, and we will keep a note of your business so you are not contacted again.
Website scan and sign-up details. If you use the free scan on our ad landing page, you give us a website address, trade and town. We read that website’s public pages, robots file and sitemap, and search Google Maps for your trade and town. We keep the website address, trade, town and the result for up to 24 months, but not the Google Maps business names. If you then send your sign-up details, we use them to prepare your agreement and set up your plan, including sharing them with the content platform that runs it once you start.
Coupons and marketing emails. If you claim coupons on our website, we collect your email address and the time you claimed, and issue you a coupon code. Claiming means you agree to emails from Sitework about our own SEO and website services and offers. We never use it for anyone else’s marketing or share it. Every email has an unsubscribe link, or email support@sitework.uk and we will stop. We keep coupon claims for up to 24 months, and a note that you unsubscribed for as long as we need it to respect that.
Technical information. Our hosting providers process limited technical information needed to deliver and secure the site, such as IP address, browser type and server-log data.
Please do not send special-category personal data, such as health information, through our forms.
3. Why we use it
| Purpose | Our lawful basis |
|---|---|
| Reply to your enquiry and prepare requested mockups, Maps checks or diagnoses | Taking steps at your request before entering a contract. |
| Build, host and support your website, and deliver search and Google Maps work | Performing our contract with you. |
| Take payments and keep financial and tax records | Performing our contract with you, and compliance with a legal obligation. |
| Contact trade businesses we think we could help, using public business details | Our legitimate interest in finding new clients. You can object at any time. |
| Send coupon holders emails about our own services and offers | Your consent, given when you claim coupons. You can withdraw it at any time by unsubscribing. |
| Understand how the site is used so we can improve it | Our legitimate interest in improving the site, using aggregate statistics (see section 7). |
| Keep sensible enquiry and client records, and protect the site | Our legitimate interests in operating and protecting Sitework, or a legal obligation where one applies. |
We do not sell personal data. Apart from coupon claims, where you agree to it, we do not use enquiry details for newsletters, advertising audiences or marketing lists.
4. Who processes it
We use a small number of service providers to run the website, the forms and the service:
- Vercel, which hosts this website and runs the form, analytics and payment functions.
- Supabase, which stores enquiry submissions, coupon claims, client intake answers and site analytics.
- Telegram, which we use to receive an instant alert with the details of each new enquiry.
- Stripe, which processes plan payments and issues receipts.
- Resend, which sends our service emails, such as your signed agreement and welcome emails, and our coupon emails.
- Google Workspace, which runs our email.
- Meta (Meta Platforms Ireland), only on our ad landing pages and only if you accept its cookie, as explained in section 7. Meta decides how it uses that data under its own privacy policy.
- Google Ads and Google Analytics (Google Ireland), only on our ad landing pages (Google Analytics on
/top3/only) and only if you accept their cookies, as explained in section 7. Google decides how it uses that data under its own privacy policy. - Fontshare and Google Fonts, which supply the fonts used on this site. When your browser requests a font, the relevant provider may receive technical information such as your IP address.
Client websites are hosted on Cloudflare, and their code is stored on GitHub. These providers process information to provide their services. We may also share information where the law requires it or to establish, exercise or defend legal claims.
5. International transfers
Some of these providers, including Vercel, Cloudflare, GitHub, Telegram, Stripe, Resend and Google, may process information outside the UK. Where that happens we rely on safeguards recognised by UK data protection law, such as adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Addendum. You can ask us for more detail about the safeguards relevant to your information.
6. How long we keep it
We keep enquiries that do not become work for up to 24 months, then delete them unless there is a genuine reason to keep them longer. We keep public business details used for outreach for up to 24 months, except the short do-not-contact note, which we keep for as long as it is needed to respect your objection. Client records, including signed agreements, are kept for as long as we provide the service and for six years afterwards so either of us can rely on them, and financial records normally for up to six years after the relevant financial year. Individual analytics events are kept for up to 12 months, then deleted.
7. Cookies and similar technologies
Sitework does not set cookies and does not use advertising, cross-site tracking or third-party analytics, with one exception: the Meta Pixel and the Google tag (Google Ads, and Google Analytics on /top3/) on our ad landing pages (/maps-check/ and /top3/), described below. Everywhere else we use only our own first-party analytics, solely to produce aggregate statistics about how the site is used, so we can improve pages and fix enquiry routes that are not working.
To do this, your browser keeps a random identifier in session storage that lasts only while the tab is open. With it we record the page path, the referring page, screen size and broad device type, how far you scroll, which sections you reach, clicks on the call, WhatsApp and enquiry buttons, which form steps and questions you reach (the question, never your answer), how long the page is actively open, any error message a form shows you, which version of a page you saw if we are testing two, your cookie choice on the ad landing page and, if you came from an ad, the campaign name and search term carried in the web address. We do not record your IP address, what you type into forms, or anything that links these events to your name or contact details. UK law allows this kind of analytics without consent, provided we explain it and give you a simple way to object.
To opt out, use the button below. It saves a small note in your browser's local storage so analytics stays off on this device. Analytics is also switched off automatically if your browser sends a Global Privacy Control or Do Not Track signal.
Meta Pixel and Google tag on the ad landing pages. /maps-check/ and /top3/ ask before loading either. They load only if you press Accept, and never if you have turned analytics off below or your browser sends Global Privacy Control or Do Not Track. Once loaded they set Meta and Google cookies and tell Meta and Google that the page was viewed and, if you send the form, that an enquiry was made, so we can see which ad works. On /top3/ the Google tag also sends Google Analytics (GA4) measurements: which sections you reach and which buttons and form steps you use (never what you type). We set Google Analytics up without Google signals or ad personalisation. We do not send your form answers, name, phone number or email to Meta or Google. They receive your IP address and browser details and may link them to a Facebook, Instagram or Google account under their own privacy policies. If you arrived from a Google ad, the click reference Google adds to the web address is saved with your enquiry so we can tell which ad it came from; that happens whatever you choose, and nothing is sent to Google because of it. You can change your choice at any time with the Cookie settings link at the bottom of that page. Your choice is saved in your browser's local storage.
Other browser storage on the site is only used because a feature needs it. The client intake form saves your unfinished answers on your device so you can come back to them, and the Coursework classroom keeps you signed in. These are strictly necessary for the feature you are using.
8. Visitors to our clients' websites
When we build and host a website for a client, the client is the controller for their visitors' information and their own privacy notice applies. We act as their processor under a written agreement set out in our terms. For example, some client sites tell us when a visitor taps a call, email or WhatsApp button, and which page they were on, so we can report enquiry numbers to the client. Those records contain no name, contact details, message content or IP address.
9. Your rights
Depending on the circumstances, you can ask to access, correct, erase or restrict the use of your personal data. You have an absolute right to object to direct marketing, and you can object to other processing based on our legitimate interests. You may have a right to data portability where the law applies. To make a request, email us at support@sitework.uk. We aim to respond within one month.
You can also complain to the UK regulator, the Information Commissioner's Office. We would appreciate the chance to resolve any concern first.
10. Children and automated decisions
Sitework is for business owners and people authorised to act for a business. It is not aimed at children, and you should be 18 or over to use our forms. We do not make decisions about you solely by automated means.
11. Changes to this policy
We may update this policy when the service or the law changes. The date at the top tells you when it was last revised.
Sitework, operated by Jacob Orsborn-Smith, United Kingdom. Email support@sitework.uk.