Privacy Policy

Website Rebuilder Pro is a trading name of CodeHawks Limited, a company registered in England & Wales (company no. 16095971), registered office Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. We are the data controller for the personal data described below. This policy explains what we collect, why, and your rights under UK GDPR.

1. What we collect

If you order a rebuild

• Business name, contact name, email address, and phone number
• Your existing website URL, and any photos, copy, or brand details you upload
• Revision requests and feedback you submit
• Payment is handled entirely by Stripe - we receive confirmation that you paid, never your card number

If we contact you about a rebuild we made speculatively

We sometimes identify businesses whose websites are outdated, build an unsolicited preview, and email the business using publicly available contact details (found on the business's own website, or via a business-contact lookup service). We rely on legitimate interests as the legal basis for this, as permitted for relevant B2B communications under UK GDPR and the PECR business-to-business exemption. Every email includes our company details and a one-click way to opt out; opting out or not responding stops all further contact and removes you from our list.

If you just browse the site

If you accept analytics cookies via the banner, we use Google Analytics to see aggregate usage - which pages get visited, roughly how, and from where. We don't run any advertising or cross-site tracking scripts, and Google Analytics only runs at all if you consent. See our Cookie Policy for the full list of cookies and how to change your choice. We also use Google Search Console, which reads how the site appears in Google Search results and does not set any cookie or otherwise process your personal data.

2. Why we process it

• To provide the Service - generating your rebuild, hosting it, processing payments, and handling revisions (necessary to perform our contract with you)
• To communicate with you - order updates, preview links, billing and lock/reminder notices for the hosted plan (contract, and our legitimate interest in keeping you informed)
• To reach prospective customers - the speculative outreach described above (legitimate interests)
• To understand site usage - Google Analytics, only if you consent via the cookie banner (consent)
• To meet legal obligations - keeping financial records for tax purposes

3. Who we share it with

We use the following processors to run the Service. Each only receives what it needs to do its job:

• Stripe - payment processing and subscription billing
• Supabase - our database, storing order and account records
• Resend - sending transactional emails (order updates, receipts, lock reminders)
• Cloudflare - content delivery, DNS, edge hosting, and storage of your rebuilt site's assets
• Railway - hosting for our background build workers
• Vercel - hosting for this website
• Google - Analytics (only if you consent) and Search Console, to understand and improve the site

We do not sell your data. We only disclose it beyond the above if required by law, or as part of delivering and hosting your rebuilt site.

4. International transfers

Some of our processors operate infrastructure outside the UK/EEA (for example, in the US). Where that happens, we rely on their standard contractual clauses or equivalent safeguards recognised under UK GDPR.

5. How long we keep it

We keep order and account data for as long as your order or subscription is active, plus a reasonable period afterwards to handle revisions, disputes, and legal record-keeping (financial records are typically kept for 6 years, as UK tax law requires). If a hosted site lapses, its assets are archived rather than deleted immediately - see our Terms of Service for the locking and archiving process. You can ask us to delete your data sooner, subject to section 6.

6. Your rights

Under UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your data, or restrict how we use it
• Provide your data in a portable format
• Stop processing your data where we rely on legitimate interests, including outreach emails

To exercise any of these, email hello@websiterebuilderpro.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.

7. Changes to this policy

We may update this policy as the Service changes; the "last updated" date above will reflect the latest version.

8. Contact

Questions about this policy or your data: hello@websiterebuilderpro.com.