Last updated: August 2026
Who we are
Onlineify builds websites. The data controller for the personal data described in this policy is ONLINEIFY GROUP LTD, a private limited company registered in England and Wales, company number 17107947, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. VAT registration number 516 8892 50.
For anything about your data, email info@onlineify.co.uk. We aim to respond within a few working days and always within one month.
The data we collect
Data you give us. Your name, business name, email address, phone number, domain details and anything you write in a form, an enquiry or during your build. If you buy, we also hold your order details.
Payment data. Card and bank details are collected and processed by our payment providers, Stripe and GoCardless. We never see or store your full card number or bank credentials. We receive confirmation of payment and the details needed for our accounting records.
Data collected automatically. Basic technical data when you use the site, such as pages visited, approximate location from your IP address, browser and device type. See the cookies notice for exactly what the site stores on your device.
We do not knowingly collect data from children. The product is sold to businesses and the site is not directed at anyone under 18.
Why we use it, and the lawful basis
- To answer an enquiry. Basis: our legitimate interest in responding to people who contact us.
- To deliver your build and run your order, including service messages about it. Basis: performance of our contract with you.
- To take payment and keep accounting records. Basis: performance of the contract, and our legal obligations under UK tax law.
- To keep the site and service secure. Basis: our legitimate interest in preventing fraud and abuse.
- To understand how the website configurator is used and improve it. We record which options are chosen, which screens are reached and where people stop, so we can find the questions that confuse people. Basis: our legitimate interest in improving our own product. It uses a random number held only in the page's memory, never stored on your device, which is why no consent banner is needed. Raw records are deleted after 90 days. Full detail in the cookies notice.
- Cloudflare Web Analytics. Basis: legitimate interests. Page views and load times, no cookies, nothing stored on your device, no way to identify you.
- Google Analytics. Basis: consent, asked through a banner before anything loads. Nothing goes to Google unless you say yes, and you can withdraw at any time from the cookie page. Measurement only — not advertising, and no advertising audiences are built from it. Google Ireland Limited acts as our processor; data may be transferred outside the UK under the UK addendum to the EU standard contractual clauses.
- To send marketing. Only with your consent, and you can withdraw it at any time. We do not send marketing by default and we never sell your data.
Who we share it with
Only the providers that help us run the service, acting under contract. Current categories and named providers:
- Payments: Stripe and GoCardless.
- Hosting, domains and security: Cloudflare.
- Enquiries and client records: GoHighLevel, our CRM.
- Build tooling in your own accounts: GitHub, Sanity and Google, where your project requires them.
- Analytics: nobody. Configurator measurement is recorded on our own infrastructure at Cloudflare and shared with no third party.
We may also share data where the law requires it, or with professional advisers under confidentiality.
International transfers
Some providers process data outside the UK, including in the United States. Where that happens we rely on UK adequacy decisions or the UK International Data Transfer Agreement and equivalent safeguards, so your data gets the same level of protection as it does here.
How long we keep it
- Enquiries that do not become clients: up to 12 months, then deleted.
- Client and order records: for the length of our relationship, then up to 6 years after it ends, as UK tax and accounting law requires.
- Analytics: aggregate data only, kept as set out in the cookies notice.
Your rights
Under UK data protection law you have the right to:
- access a copy of your personal data;
- correct data that is wrong or incomplete;
- have your data deleted;
- restrict how we use it;
- object to processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where consent is the basis.
To use any of these, email info@onlineify.co.uk. There is no charge and we respond within one month. We do not make automated decisions about you that have legal or similar effects.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it first.
Changes to this policy
If we change this policy in a way that matters, we update the date at the top and, where the change is significant, tell clients directly.
Contact
Questions about this policy: info@onlineify.co.uk.