SiteFitted privacy notice

Who controls your data

SiteFitted is responsible for the personal information described here. Contact hello@sitefitted.co.uk. You can also write to 5 Brayford Square, London, E1 0SG, United Kingdom.

What we collect

We collect order and contact details, your fitting-form answers, business information, messages, photographs and files you upload, approval and support history, and technical information needed to keep the service secure. Stripe processes your payment details; we receive payment status and customer references rather than your full card number.

Why we use it

We use information to take and fulfil your order, write and build the website, provide Website Care when selected, respond to enquiries, communicate with you, keep accurate records, prevent misuse and meet legal obligations. Our legal bases are performance of our contract, legal obligations and legitimate interests in operating and protecting the service. We ask for consent where the law requires it.

Who receives it

Information is shared only where needed with service providers such as Stripe for payments, our hosting and storage infrastructure, an email delivery provider if notifications are enabled, and Google for advertising measurement as described below. We do not sell personal information. Providers may process information outside the UK under appropriate safeguards.

How long we keep it

We keep information only as long as needed for the website service, support, security, disputes and legal record-keeping. Financial records are kept for the statutory period. Unneeded uploads and working files are deleted or anonymised.

Cookies and measurement

Essential storage supports the checkout, fitting journey, security and admin sign-in. Stripe may use essential fraud-prevention and payment technology when checkout opens.

SiteFitted also counts broad website actions such as landing-page views, demo openings, enquiries and purchases so we can understand whether the shop is working. These SiteFitted counts do not store an IP address, Google click identifier or the content entered in a form. If you allow measurement, a random identifier lasts for the current browser session so separate actions can be counted as one anonymous session. It does not identify you and is cleared when the session ends.

Google advertising measurement loads with advertising and analytics storage denied by default. Before you make a choice, or when you keep essential storage only, Google does not set advertising measurement cookies but may receive limited cookieless signals such as consent status, page and device information and whether a visit followed an advertisement. If you choose “Allow measurement”, Google may use measurement storage to report more accurately whether an advertisement led to an enquiry or purchase. You can change your choice later using “Cookie choices” in the website footer.

Business outreach

We may use publicly available business contact information to make relevant, limited business-to-business introductions. We record the source, use legitimate interests where appropriate, and stop when someone objects. We keep a suppression list so that an opt-out is respected.

Future outreach emails may include a random code in an Owner Centre link. When that link is used, the code lets our private admin record which business outreach record opened the page and whether the check was completed. The code does not contain the business email address or identify a particular person, and email-security services may sometimes follow links automatically. We use this information to assess relevant outreach and avoid unnecessary follow-ups. You can object at any time using the contact details above.

Your rights

Depending on the circumstances, you may ask to access, correct, erase, restrict or transfer your information, or object to its use. You can withdraw consent where consent is the basis. Contact us to make a request. You may also complain to the UK Information Commissioner's Office.