Privacy notice

Who we are

Sitefront is run by Mark Keating, a sole trader trading as Sitefront.

We're the data controller for the information about you as a Sitefront customer. For enquiries sent by visitors to your website, you're the controller and we process them on your behalf (see our terms of service). Contact us about privacy at support@sitefront.ie.

What we collect

• Your account: name, email address and a securely hashed password (we can't read your password).
• Your website: the business details, text, photos and logo you add or that we write for you.
• Billing: your plan and payment status. Stripe handles card details; we never see your full card number.
• Domain registration: if you claim a free .com, the owner details domain rules require (name, address, phone and email), which we pass to our registrar partner.
• Enquiries: messages visitors send through your website, including their name, phone number and what they ask.
• Messages to us: your name, email address and message when you use our contact form.
• Visit statistics: which of our pages are viewed and how often, counted without cookies and without identifying you.
• Technical information: a one-way scrambled version of IP addresses, used to limit spam and misuse, and standard server logs.

How we use it, and why

• To provide the service you signed up for: building, hosting and editing your website, delivering enquiries and handling billing. (Legal basis: our contract with you.)
• To send account emails, such as confirming your email address, password resets, payment problems and important changes. (Contract.)
• To keep the service secure and stop spam and abuse. (Our legitimate interest in running a safe service.)
• To keep financial records, as Irish law requires. (Legal obligation.)

We don't sell personal information, we don't use it for advertising, and we don't send marketing emails unless you've asked for them.

Who helps us

We use a small number of trusted providers to run the service. Each only gets what it needs for its job and is bound by a data processing agreement.

• Vercel: hosting, file storage and domain registration. Our app runs in Vercel's Dublin region.
• Turso: our database, hosted in Ireland (AWS eu-west-1).
• Stripe: payments and invoices.
• Anthropic: the AI that writes and edits website text. It receives the business details you give the builder and editor, not your password or payment details.
• Resend: sending emails.
• Vercel Web Analytics: counts visits to our own pages without cookies. It doesn't track you across websites, and it isn't used on the websites we host for businesses.
• Cloudflare Turnstile: if switched on, checks that contact forms are sent by people, not bots.

Some of these providers are based outside the European Economic Area. Where information is transferred there, it's protected by appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Account and website content: while your account is open. If your plan ends we keep your content so you can come back, and we'll delete it if you ask.
• Enquiries: until you delete them or close your account.
• Messages to us: as long as we need them to deal with your query, and deleted sooner if you ask.
• Billing records: six years, as Irish tax law requires.
• Backups: encrypted daily backups are kept for 30 days and then deleted automatically.
• Spam and misuse checks: only as long as needed for that purpose.

Keeping it safe

Everything is sent over secure https connections. Passwords are hashed, backups are encrypted, and access to customer data is limited to what's needed to run and support the service.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email support@sitefront.ie and we'll respond within one month.

If you're unhappy with how we've handled your information, you can complain to the Data Protection Commission at dataprotection.ie. We'd appreciate the chance to sort it out first.

Visitors to websites built with Sitefront

If you sent an enquiry to a business through a website built with Sitefront, that business decides how your details are used. Contact them first. We store and deliver the enquiry for them, and you can also contact us at hello@sitefront.ie.

Changes

If we make important changes to this notice, we'll update the date at the top and email customers about anything significant.