Legal · UK GDPR

Privacy Policy

How Same Day Website Launch collects, uses and protects personal data under the UK GDPR and Data Protection Act 2018. Last updated 26 April 2026.

Notice: this is a template policy. Have it reviewed by a UK solicitor before shipping it as binding to clients.

1. Who we are

Same Day Website Launch Ltd, a company registered in England & Wales (registered office: East London, UK). Email: hello@samedaywebsitelaunch.com. We are the data controller for personal information you give us through this site.

2. What data we collect

  • Briefing form: name, business name, email, phone (optional), city, plan interest, message.
  • Contact form / email: what you choose to send us.
  • Server logs: IP address, user-agent, timestamps, requested URL — for security and abuse prevention.
  • Analytics (Google Analytics 4): anonymised page views, device type, country. No personally identifiable analytics.
  • Cookies: see our Cookies Policy.

3. Lawful basis

We process the briefing/contact data on the basis of your consent and to take steps prior to entering a contract (UK GDPR Art. 6(1)(a) and 6(1)(b)). Server logs are processed under our legitimate interest in securing the website (Art. 6(1)(f)).

4. How we use it

We use your information to respond to you, prepare a quote, deliver the service you booked, and follow up. We don’t sell your data. We don’t use it for advertising.

5. Sub-processors

Where we share data with third-party services, we do so under documented Data Processing Agreements:

  • Vercel (web hosting, USA / EU edge — adequacy decision in place)
  • Google LLC (Analytics, Search Console — UK Standard Contractual Clauses)
  • Cloudflare (CDN / WAF — UK adequacy)
  • Stripe (payments — UK regulated)
  • Email provider (transactional email — UK / EU)

6. How long we keep it

Briefing emails: 6 years (HMRC commercial-records retention). Server logs: 30 days. Analytics: 14 months. Marketing consent: until you withdraw it (one-click in any email we send you).

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, port, restrict and object to processing of your personal data. Email us and we’ll respond within 30 days. You can also complain to the ICO.

8. International transfers

We use UK and EU-based hosting where possible. Where data is transferred outside the UK (e.g. some analytics), we rely on UK adequacy decisions or Standard Contractual Clauses.

9. Changes to this policy

We’ll update this page when our practices change. Material changes will be flagged at the top of this page for at least 30 days.

10. Contact

Questions, requests, complaints: hello@samedaywebsitelaunch.com