Privacy Policy

§ 0 Who we are

This site is operated by RapidSite.design, a trade name of [ENTITY] (“we,” “us,” or “our”). We are the data controller for the personal information described in this policy. You can reach us at contact@rapidsite.design. This policy applies to rapidsite.design and to any email correspondence you initiate with us.

§ 1 What we collect

We collect only what you give us. The website itself is a static document — it does not run analytics, advertising trackers, fingerprinters, third-party social embeds, or behavioural cookies. The categories of personal information we may receive are:

1. Enquiry data — the email address from which you write to us, the contents of your message, and any attachments you choose to send (typically the trade you work in, your business name, your service area, your phone number, and a description of the services you offer).
2. Engagement data — if we accept a quote together, the information needed to perform the work: business address, license numbers you choose to publish, photographs and copy you supply, and any preview-link feedback you send.
3. Billing data — if we issue an invoice, your billing name, billing address, and the last four digits and brand of the card or bank account used to pay. Full payment-card numbers are processed by our payment processor and are never stored, viewed, or transmitted by us.
4. Hosting data (managed plan only) — if you purchase managed hosting, our hosting Third Party will receive standard server logs (visitor IP, user-agent, request URL, timestamp) for the operation, security, and abuse-prevention of the service. We do not augment those logs with profiling tools.

We do not knowingly collect any “sensitive” personal information (race, religion, health, biometrics, precise geolocation, etc.). Please do not send us such information.

§ 2 Why we use it & legal basis

We use the personal information you give us only for the purposes for which you gave it: to reply to your enquiry, to prepare and deliver a quote, to perform an Engagement, to issue and collect invoices, to operate any managed-hosting service you have purchased, to comply with our legal and tax obligations, and to defend our legal rights. Where the European Union General Data Protection Regulation or the United Kingdom General Data Protection Regulation applies, our legal bases are (a) the performance of a contract with you, (b) the taking of steps at your request prior to entering a contract, (c) compliance with our legal obligations, and (d) our legitimate interests in operating, securing, and improving our business, balanced against your interests and rights.

§ 3 What we do not do

1. We do not sell, rent, lease, license, or trade your personal information to anyone, ever, for any purpose. Full stop.
2. We do not share your personal information with advertisers, ad networks, or data brokers.
3. We do not use your information to train artificial-intelligence models.
4. We do not place behavioural-tracking cookies. The site is a static document.
5. We do not perform automated decision-making or profiling that produces legal or similarly significant effects for you.

§ 4 Third-party processors

We use a small set of established third-party services to operate the business. Each receives only the minimum personal information necessary to perform its function and is bound by its own privacy commitments, which we encourage you to read. Categories of processors include:

1. Email infrastructure — to send, receive, and store our email correspondence with you.
2. Payment processing — to issue invoices and accept payment card or bank transfers. The processor is solely responsible for payment-card data security and compliance with the Payment Card Industry Data Security Standard.
3. Cloud hosting & CDN — to serve this website and any managed-hosting site you purchase.
4. Domain registration & DNS — only if you ask us to register a domain on your behalf.
5. Accounting & tax — to comply with our books-and-records obligations.

We are not responsible for the privacy practices of any third party. Your recourse for the handling of your information by a third party is with that third party. See Terms § 5 & § 13.

§ 5 Cookies

The marketing site at rapidsite.design sets no cookies of its own and embeds no third-party tracking pixels. The Google Fonts stylesheet referenced in the page header may receive your IP address as a necessary side-effect of any HTTP request to fonts.googleapis.com; that interaction is governed by Google’s privacy practices, not ours. If you object to that interaction, modern browsers allow you to disable web fonts. Sites we build for clients on the managed-hosting plan are also configured cookie-free by default; if a client subsequently chooses to add an analytics or marketing tool, the disclosure obligation for that tool sits with the client, not with us.

§ 6 Retention

We retain enquiry email indefinitely unless you ask us to delete it. We retain Engagement and billing records for the period required by applicable tax, accounting, and statute-of-limitations law (typically seven (7) years in the United States). After the retention period expires, we delete or de-identify the information.

§ 7 Your rights

Depending on where you live, you may have the right to (a) access the personal information we hold about you; (b) correct inaccurate information; (c) delete your information, subject to our retention obligations; (d) restrict or object to certain processing; (e) request portability of your information; (f) withdraw consent where processing is based on consent; and (g) lodge a complaint with your local data-protection authority. Residents of California, Virginia, Colorado, Connecticut, Utah, and certain other United States states with comprehensive privacy laws have substantially similar rights, including the right to opt out of any “sale” or “sharing” of personal information — we do not engage in either. To exercise any right, email contact@rapidsite.design with the subject line “Privacy rights request.” We will respond within the timeframe required by applicable law.

§ 8 International transfers

We are based in the United States. Information you send us may be processed and stored in the United States or in any country in which our processors operate. By engaging us, you consent to that transfer, subject to applicable cross-border-transfer safeguards (including, where required, Standard Contractual Clauses).

§ 9 Security

We employ commercially reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the internet or method of electronic storage is one-hundred-per-cent secure. While we strive to protect your information, we cannot guarantee its absolute security and disclaim any warranty of security to the maximum extent permitted by law. Notification of any data incident affecting your information will be made in accordance with applicable law.

§ 10 Children

This site is not directed at, and we do not knowingly collect personal information from, anyone under the age of sixteen (16). If you believe a child has provided us with personal information, please contact us and we will delete it.

§ 11 Linked sites

This site may contain links to third-party websites we do not control. We are not responsible for the content, privacy practices, or security of any linked site. Visiting a third-party site is at your own risk and is governed by that site’s privacy policy.

§ 12 Changes

We may update this policy from time to time. The “Effective” date at the top of the document indicates when the current version was published. Material changes will be highlighted on this page. Your continued use of the site or continued engagement with us after a change constitutes acceptance of the updated policy.

§ 13 Contact

For any privacy question, request, or complaint, write to contact@rapidsite.design. We answer every message a real person sends us.