Privacy notice.

BasicBitchSites (a sole trader based in the UK) is the data controller for the information described here. You can reach us at contact@basic-bs.co.uk. Our correspondence address is Lancashire, United Kingdom.

• Enquiry form data: your name, business name, email address, and anything optional you choose to give us — phone number, current website, budget, timeline, and your project notes or business brief.
• Uploaded files: any logos, photos, documents or write-ups you attach to your brief.
• Billing data: handled by Stripe. We never see or store your full card number. We receive your name, email, and a record of what you paid.
• Website chat: if you use the AI assistant on this site, we store your messages so we can improve the answers and follow up on genuine enquiries. Don't paste anything sensitive into it.
• Technical logs: our hosting records IP address, browser type and pages requested, for security and to keep the site running.

• Legitimate interests — replying to your enquiry, answering your questions, and keeping the site secure.
• Contract — building, hosting and maintaining your website once you sign up.
• Legal obligation — keeping financial records for HMRC.
• Consent — for any non-essential cookies. We currently set none, and you can withdraw consent at any time.

We do not sell, rent or trade your data, and we don't drop you into a marketing sequence you didn't ask for.

We use a small number of suppliers, each acting on our instructions:

• Our managed cloud backend — database, secure file storage and email delivery.
• Stripe — payments and subscription billing.
• Our hosting and CDN provider — serving the website.
• Our domain registrar — registering or transferring domains on your behalf.
• Our AI provider — processes the text you type into the site assistant to generate a reply. It is not used to train public models.

Some of these process data outside the UK. Where that happens it is covered by appropriate safeguards such as the UK International Data Transfer Addendum or equivalent contractual protections.

• Enquiries that don't become customers: up to 24 months, then deleted.
• Customer and billing records: 6 years after the end of the relationship, because HMRC requires it.
• Uploaded brief files: deleted on request, or at the end of your contract.
• Chat transcripts: 12 months.

Data is transmitted over encrypted connections (HTTPS/TLS) and stored on access-controlled managed infrastructure. Uploaded files are not publicly readable — they can only be opened through short-lived signed links by us. Access is limited to the people who actually need it, which right now is one person.

Under UK GDPR you can ask us to:

• give you a copy of the data we hold about you (access);
• correct anything that's wrong (rectification);
• delete it (erasure);
• restrict or object to how we use it;
• send it to you or someone else in a portable format;
• withdraw consent where we relied on it.

Email contact@basic-bs.co.uk and we'll action it within one month — usually a lot sooner. It's free.

If you think we've got it wrong, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd rather you told us first so we can fix it.

We use one strictly necessary item to remember your cookie choice, and nothing else. The full detail is on our cookie policy.

If this notice changes materially we'll update the date at the top and, where it affects consent, ask you again through the cookie banner.