Privacy Policy.

1. Who we are

Find Us Online operates at findus-online.co.uk. We provide done-for-you website design, hosting, and maintenance services for UK tradespeople. In this policy, “we”, “us”, and “our” refer to Find Us Online.

2. What data we collect

We may collect:

• Account information — name, email address, and password (stored as a secure hash)
• Business details — your trade, services, service areas, qualifications, and contact details
• Uploaded files — logos, photographs, and any other assets you share with us
• Facebook page content — if you choose to share your Facebook business page link, we look up your page's publicly visible information (business description, service area, contact details, post text, cover and profile images, post images, and customer reviews from your Reviews section) to help fill in your site. We download a copy of all images and reviews from your public Facebook page and store them on our servers. We only read public content — we never access private messages or post on your behalf, and sharing the link is entirely optional.
• Contact form submissions — enquiries submitted through your client website
• Usage data — how you interact with the Find Us Online portal (page views, actions taken)
• How you found us — when you sign up, we keep on your account which of our own links brought you (for example our Facebook advert), which website sent you (only its name, such as facebook.com, never the page), and whether you signed up inside the Facebook or Instagram app. We never keep anything that identifies you from this, such as your IP address or the full address you came from.

3. How we use your data

• To design, build, and maintain your website
• To enrich your site from your public Facebook page, where you choose to share its link
• To process payments and manage your subscription
• To send you notifications about your site (build updates, renewal reminders)
• To forward contact form enquiries from your site to you
• To improve our service

4. Legal basis

We process your data under the following legal bases:

• Contract performance — processing necessary to deliver the service you signed up for
• Legitimate interests — service improvement, fraud prevention, and security
• Consent — where you have explicitly opted in to optional communications

5. Who we share data with

We do not sell your data. We share limited data with trusted third-party services:

• Stripe — payment processing. Subject to Stripe's privacy policy.
• Resend — transactional email delivery (build notifications, invoices)
• Domain registrar — to register and manage your .co.uk domain
• Apify — we use Apify for two Facebook lookups during onboarding. First, when you start onboarding we send your business name and location to Apify to search for your Facebook business page and suggest matching pages, so you can confirm yours with one tap. Second, if you share a Facebook page link, we send that link to Apify to retrieve your page's publicly visible information. Apify processes this data only to perform these lookups. Subject to Apify's privacy policy.
• Anthropic — AI drafting of your website content. We send the business details and content you provide (never your password or payment details) to Anthropic's API to draft your site. Under its API terms, Anthropic does not use our data to train its models.
• Hosting and backups — your website and data are hosted on our managed servers, with encrypted backups stored with Microsoft OneDrive.

6. International transfers

Some of our providers (including Stripe, Resend and Anthropic) process data in the United States. Where personal data leaves the UK, these transfers are protected by the UK–US Data Privacy Framework extension or by UK-approved contract terms (the International Data Transfer Agreement or Addendum).

7. How long we keep data

• Active accounts — for the duration of your subscription, plus 90 days after closure
• Contact form submissions — 90 days, then automatically deleted

8. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal obligations)
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@findus-online.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies and analytics

We use the following cookies:

• Session cookie (essential) — keeps you logged in to the Find Us Online portal. This cookie is strictly necessary and cannot be disabled.

We do not use any analytics, tracking, or advertising cookies.

On our public marketing pages (such as our homepage and pricing pages) we use Umami, a privacy-focused analytics tool that we self-host on our own servers. It is cookieless, stores nothing on your device, and collects no personal identifiers — it gives us aggregate statistics only (for example, page views and referring sites), and the data never leaves our infrastructure. When you arrive from one of our own campaign links, such as an advert or a post of ours, Umami also records which campaign that link belonged to. We use it on our preview and claim pages in the same way. If you arrive there from a private link we sent you, the unique part of that link is removed before anything is sent to Umami, so it is not recorded there. The client portal and our administrative areas are not tracked.

We also keep our own record, on our own servers, of what happens to the private preview links we send to businesses. When one is opened, when that page's pictures load, when someone clicks through to the website we built, or when someone completes a claim, we record the time, which business's link it was, what happened, whether it looked like an automated system or a person, and a broad family for the software used — for example a Facebook link-preview robot, a phone browser, or a desktop browser. Each record also carries a short one-way code, worked out from your network address and that software family: it cannot be turned back into either, and it is tied to one link, so the same person opening two businesses' links produces two unrelated codes.

These records do not contain your network address, the full identifier your browser sends, or the address of the link itself. If you arrive from another website we record only its name, and only where it is a site we expect such as Facebook; anything else is recorded simply as “other”, and we never record the page you came from. The purpose is narrow: to know whether a business we contacted actually saw the preview we made for it. We delete the one-way code from these records after 90 days, and the records themselves after 180 days; this runs automatically from 1 November 2026, and no record is old enough for either deadline before then. We record this only when someone opens or acts on one of these private links, and never from your use of the client portal or our administrative areas.

Like any website, our servers keep short-term technical records of the requests they receive — these do include your network address, your browser's full identifier and the address requested — and they are deleted automatically within 31 days.

10. If we emailed your business about a website

Some businesses first hear from us by email, out of the blue: an email offering a free preview of a website, or one with a private link to a preview we have already built. If that was you, this section says what we hold about your business, where we got it, and how to make us stop. The sender is Find Us Online (see section 1), and every email we send says who we are.

What we hold about your business:

• its name as it appears online, and the town and trade we found it under
• the business email address and phone number we found, and a WhatsApp number only if you advertise one
• your website address, and links to your Facebook page and Google Maps listing
• a short note on your website, our rating of it, and a score we use to choose who to contact first
• your Companies House record — the registered company name, number and status, its registered address, when it was set up, its company and accounts type, and its trade (SIC) codes
• if we built you a preview: the preview site itself, with photos and reviews copied from your public Facebook page
• a record of the emails we have sent you, whether they were delivered, opened or clicked, and any reply you sent

Where it came from. We searched the web for your trade and town — Google, Google Maps, Facebook, Yell and review sites — and read your own website and your public Facebook page. We checked your company against the free public register that Companies House publishes. Some businesses we found the other way round: on that register first, listed under a building trade, and then on their own website.

Why, and on what basis. We use these details to offer limited companies a free preview of a website we could build for them, and sometimes to build that preview first and send you a private link to it. We do this under legitimate interests: telling a business about a service it may want. UK email marketing rules (PECR) allow this kind of email to limited companies without asking first, as long as you can say no at any time.

Who else handles it. Our emails offering a preview go out from our own Microsoft 365 mailbox. An email with a link to a preview we have built goes through Resend, which tells us when it is delivered, opened or clicked. We use Apify to read your public Facebook page, and AI (Anthropic) to help with the research and to draft the preview.

How long we keep it. There is no set date yet when we delete these details. If you ask us to, we will delete them, keeping only what stops us emailing you again: your entry on our do-not-contact list.

Your right to object. You can tell us to stop at any time. Reply “stop” to any of our emails, or use the unsubscribe link at the bottom of it, and we won't email you again. To keep that promise we put your email address on a do-not-contact list, with a note of when and how you asked (and your reply, if you replied), and we mark your business as one not to contact, so it is left out when we choose who to email. Every email is checked against the list again just before it goes out.

You can also ask for a copy of what we hold, ask us to correct it, or ask us to delete it: email hello@findus-online.co.uk. And you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

11. Complaints

If you're unhappy with how we've handled your personal data, email hello@findus-online.co.uk with “Data complaint” in the subject line. We'll acknowledge your complaint within 30 days and respond without undue delay. You can also complain to the Information Commissioner's Office at any time at ico.org.uk/make-a-complaint.

12. Contact

For any privacy-related questions or requests, contact us at: hello@findus-online.co.uk