Privacy Policy - Ourbizz

1. Introduction

Ourbizz Limited (Company No. 17076207), a company registered in England and Wales ("Ourbizz", "we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website builder platform and hosting services (the "Service").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Ourbizz Limited (Company No. 17076207) is the data controller for the personal data we process. For enquiries, contact us at privacy@ourbizz.com.

3. Data We Collect

3.1 Information You Provide

Account Information: Name, email address, and password when you register.
Business Information: Business name, address, phone number, email, services offered, and other details you provide during the website creation process.
Website Content: Text, images, logos, and other content you supply or that we extract from your existing website with your permission.
Payment Information: Payment card details are processed securely by our payment processor (Stripe) and are not stored on our servers.
Communications: Emails, support messages, or other correspondence you send us.

3.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on pages, and interaction patterns.
Device Information: Browser type, operating system, screen resolution, and device identifiers.
IP Address: Your IP address, which may indicate your approximate location.
Cookies: See our Cookie Policy for details.

3.3 Information from Website Scanning

When you provide a URL for scanning, we access publicly available information on that website including text content, images, branding elements (colours, fonts), and page structure. This data is used solely to generate your new website.

3.4 Website Requests and Uploaded Material

When you request a website refresh or a new website, we process the details, links, notes and files you provide. Uploaded logos, photographs, business cards, flyers and PDFs are held in private storage and are available only to authorised Ourbizz personnel and service providers who need them to assess or fulfil your request. Only upload material you have permission to share.

4. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery: To create, host, and maintain your website.
Account Management: To manage your account, process payments, and communicate with you about your subscription.
AI Processing: To generate website content using artificial intelligence. Your business information is processed by AI models to create relevant website copy and structure.
Improvement: To analyse usage patterns and improve our Service, features, and user experience.
Security: To detect and prevent fraud, abuse, and security incidents.
Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our terms.
Communication: To send you service-related notifications, billing alerts, and (with your consent) marketing communications.

5. Legal Basis for Processing

We process your data under the following legal bases:

Contract: Processing necessary to perform our contract with you (providing the Service).
Legitimate Interest: Processing necessary for our legitimate business interests (improving the Service, security, analytics), provided these do not override your rights.
Consent: Where you have given explicit consent (e.g., marketing communications).
Legal Obligation: Processing necessary to comply with a legal obligation.

6. Data Sharing

We may share your data with:

Payment Processors: Stripe processes your payment information securely under their own privacy policy.
Hosting Infrastructure: Our cloud hosting providers store and serve your website data.
AI Service Providers: AI model providers may process your business information to generate website content. We ensure appropriate data processing agreements are in place.
Analytics Providers: We may use analytics services to understand usage patterns.
Legal Requirements: We may disclose data if required by law, court order, or to protect our rights and safety.

We do not sell your personal data to third parties. We do not share your data for third-party marketing purposes.

7. International Data Transfers

Some of our service providers may be located outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

8. Data Retention

Active Accounts: We retain your data for as long as your account is active and your subscription is current.
After Cancellation: We retain your data for up to 30 days after cancellation to allow for reactivation. After this period, your website data is permanently deleted.
Financial Records: Payment and billing records are retained for up to 7 years as required by law.
Scan Data: Raw website scan data is retained only as long as necessary to deliver the Service and is typically deleted within 90 days.
Website Requests: Request details and uploaded material are retained while we assess or fulfil the request, and then only as long as needed for service, legal, security or record-keeping purposes.

9. Your Rights

Under UK GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
Restriction: Request restriction of processing in certain circumstances.
Portability: Request your data in a structured, commonly used, machine-readable format.
Object: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@ourbizz.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Encryption of data in transit (TLS/SSL) and at rest.
Secure authentication and access controls.
Regular security monitoring and updates.
Secure payment processing via PCI-DSS compliant providers.

While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

12. Published Websites & Visitor Data

When your website is published on Ourbizz, essential request information may be processed for security. With a visitor's consent, basic usage data such as pages visited, broad device/browser information and interactions may be processed for analytics. As the website owner, you are the data controller for any personal data collected through your published website (e.g., contact forms). You are responsible for having appropriate privacy notices on your published site.

13. Custom Domains & Email

If you connect a custom domain, please note:

Your domain registrar will have its own privacy policy governing your domain registration data (WHOIS).
DNS changes required for our service may affect email delivery. We do not process or store emails sent to your domain - this is handled by your email provider.
We are not responsible for the privacy practices of your domain registrar or email service provider.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. We encourage you to review this page periodically.

15. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

16. Contact

For privacy-related enquiries, contact us at privacy@ourbizz.com.