Privacy Policy
This Privacy Policy explains how I collect, use, store, and protect personal data when you use Subsite services.
Subsite is a trading name of Jack Legge, a self-employed sole trader based in the UK.
1. Who is responsible for your data
Data controller: Jack Legge
Contact email: hello@subite.uk
I do not publish a public office address. If required for legal purposes, it can be provided upon request. If you need to contact me about privacy matters, please email me at the address above.
2. The personal data I collect
I may collect and process the following personal data:
Contact details (such as name, email address, phone number)
Business details (such as business name, website, and project information)
Information you send through contact or project brief forms
Communications you send by email, phone, WhatsApp, social media messaging, or other channels
Client billing details (such as name, billing address, and company name)
Technical and usage data collected through analytics and cookies (see Cookies section)
I do not store full card payment details.
Payments are processed securely by third-party providers (such as Stripe), who handle payment data in accordance with their own privacy policies.
3. How I collect your data
I collect data when you:
Submit forms on the website (including form providers such as Tally and similar providers)
Contact me directly by email, phone, WhatsApp, or social media (including Instagram, Facebook, and X)
Become a client and provide information needed to deliver services and issue invoices
Use the website, where analytics and cookies may collect limited technical data
4. How I use your data
I use your personal data to:
Respond to enquiries and discuss your project
Deliver website design, build, hosting, and support services
Manage client relationships and project communication
Issue invoices and maintain business and tax records
Improve website performance and user experience
Send relevant marketing emails (where legally permitted)
Comply with legal and regulatory obligations
5. Lawful bases under UK GDPR
Under UK GDPR, I rely on the following lawful bases:
Legitimate interests: to respond to enquiries, run and improve my business, and provide ongoing client support
Contract / steps before entering a contract: where I need your data to provide services you request or to prepare to provide them
Legal obligation: to keep tax, accounting, and regulatory records
Consent: for marketing emails and, where required, non-essential cookies
You can withdraw consent at any time (for example, by clicking unsubscribe in marketing emails or contacting me directly).
6. Marketing communications
I may send occasional marketing emails about Subsite services where I have your consent, or where I am permitted to do so under applicable law (for example, in relation to existing clients).
You can unsubscribe at any time using the unsubscribe link included in marketing emails, or by emailing hello@subsite.uk.
7. Cookies and analytics
I use cookies and similar technologies to operate the website and understand how it is used.
These may include:
Essential cookies required for the website to function
Analytics cookies (such as Google Analytics) to understand usage and improve performance
Where required by law, I will request your consent before setting non-essential cookies. You can manage your preferences through the cookie banner when you visit the site. You can also control cookies through your browser settings.
8. Third-party service providers (processors)
I use trusted third-party tools to operate the business. Depending on the project and workflow, these may include:
Website and hosting providers (such as Framer, Netlify, and related infrastructure providers)
Form providers (such as Tally and similar services)
Analytics providers (such as Google Analytics)
Invoicing and payment tools (such as Harvest, Stripe, and bank transfer services)
Client management tools (such as Capsule CRM)
Booking software (such as Cal.com)
These providers may act as data processors (processing data on my behalf) or independent data controllers, depending on the service.
I do not sell your personal data.
9. International data transfers
Some service providers I use may process data outside the UK.
Where personal data is transferred internationally, I ensure appropriate safeguards are in place where required, such as adequacy regulations or approved contractual protections (for example, standard contractual clauses).
If I use freelancers in future, they will only receive the minimum information needed for the task, and I will only share client personal data where necessary and lawful.
10. Data retention
I keep personal data only for as long as necessary for the purposes described in this policy, and in line with legal, accounting, and regulatory requirements.
Typical retention periods:
Enquiry and prospect data: up to 24 months from last meaningful contact
Client project records: up to 24 months after services end (unless longer retention is needed for legal reasons)
Tax and accounting records: 6 years (or longer where required by law)
I may keep data longer if required to establish, exercise, or defend legal claims.
11. Data security
I take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.
No method of transmission or storage is completely secure, but I follow proportionate security practices for a small service business.
12. Your data protection rights
Depending on your circumstances, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of your data
Restrict or object to certain processing
Request data portability
Withdraw consent where processing is based on consent
Lodge a complaint with the UK Information Commissioner’s Office (ICO)
To exercise your rights, contact: hello@subsite.uk
I may need to verify your identity before actioning certain requests.
13. Children’s data
Subsite services are intended for adults and business owners, not children.
I do not knowingly collect personal data from children.
14. Changes to this policy
I may update this Privacy Policy from time to time.
The latest version will always be available on this page, with the updated date shown at the top.
Have questions?
Let’s have a quick chat to work out if Subsite is right for your business.
