This policy explains what personal data FastSites collects, why we collect it, how we look after it, and the rights you have. It covers our website, dashboard and services — including FastDrive and GetInbox, which share the same account and are covered by this same policy.
1. Who is responsible for your data
The data controller for the personal data described in this policy is our United Kingdom entity. FSITES LTD14446987, registered at 105 Seven Sisters Road, London, N7 7QR, United Kingdom, VAT registration number GB 427 6738 65.
FastSites, FastDrive and GetInbox are operated by the same company on one shared account system: your account, and the data described below, is common to all three rather than separate per product. Using any one of them means this policy applies to that use.
Data protection enquiries: [email protected]. [FastSites to complete: ICO registration number]
2. What we collect
- Account data — name, email address, password (stored only as a hash), and your plan and settings. This one account, and this data, is shared across FastSites, FastDrive and GetInbox — see section 1.
- Order and billing data — what you bought, when, and the billing details needed to take payment. Card numbers are handled by our payment processor and never stored by us.
- Brief and website content — everything you supply for us to build your site.
- Support data — messages you send us, including live-chat transcripts.
- Technical data — IP address, browser and device type, pages viewed and approximate location derived from IP, collected through cookies and similar technologies.
3. Why we use it, and our lawful basis
- To provide the service you bought — performance of our contract with you.
- To take payment and keep accounting records — contract, and our legal obligation to retain financial records.
- To provide support and respond to enquiries — contract, or our legitimate interest in helping people who contact us.
- To keep the service secure and prevent abuse — our legitimate interest in protecting our platform and customers.
- To send marketing emails — your consent, or our legitimate interest in contacting existing customers about similar services. You can opt out at any time.
- To measure how the site is used — your consent, given through the cookie banner, for session replay; and our legitimate interest in knowing how many people visit our public pages, for cookie-free visit counting that cannot identify you.
4. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set once you accept them, and you can change your choice at any time.
5. Who we share it with
We share personal data only where we need to, with:
- hosting and infrastructure providers who run our platform;
- payment processors who take your payment;
- domain registrars, where you register a domain through us;
- email and analytics providers that support the service;
- AI service providers that process relevant questions and conversation context to generate AI-assisted replies, as described in our AI Policy;
- professional advisers, and authorities where the law requires it.
We do not sell your personal data.
6. International transfers
Some providers are outside the UK. Where data is transferred, we rely on an adequacy decision, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with appropriate safeguards.
7. How long we keep it
- Account data — while your account is open, then up to 12 months.
- Financial records — 6 years, as UK tax law requires.
- Website content — while your plan is active, then 30 days so you can retrieve a copy.
- Support messages — up to 24 months.
- Analytics data — up to 14 months.
8. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to: be informed; access a copy of your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and to withdraw consent at any time where we rely on it. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects — we do not make such decisions.
To exercise any right, email [email protected]. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
9. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Security
We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, access controls and regular updates. No system is completely secure, but we take this seriously and will notify you and the regulator of a qualifying breach as the law requires.
11. Children
Our service is not directed at children under 16, and we do not knowingly collect their data.
12. Changes
We may update this policy. The “last updated” date above shows when, and we will tell you about significant changes.