Privacy Policy

Who we are

The data controller is Little Web Lab. Little Web Lab is the trading name of Nedas Mikelionis, a sole trader based in the UK, 3 Tattershall Road, Boston, Lincolnshire, PE21 9JG, UK. We're a small UK web studio serving businesses in the UK and Ireland. If anything here isn't clear, just email [email protected] and we'll explain it properly.

What we collect

• When you enquire: your name, business name, trade, email, and (if you give it) your phone number, current website and anything you write in the message.
• When you become a customer: the details we need to build and run your site (your business information, photos, hours, services), your login details, and billing information. Card payments are taken by Stripe on its secure pages — we never see or store your full card number.
• Enquiries sent to your site: if your plan includes a contact or quote form, the messages people send through it are stored for you to read in your client dashboard. We process these on your behalf, as your processor.
• When you visit: basic, privacy-friendly visitor stats (like how many people viewed a page) via cookieless Cloudflare Web Analytics. These are aggregated and aren't used to track you across the web.
• Demo bookings: if you try the booking calendar on one of our sample sites (the salon or the dental practice), the name, email and phone you enter create a real test appointment in our demo Setmore account so you can see the confirmation flow. No payment is taken, and demo bookings are cleared periodically.

Cookies

We don't use tracking or advertising cookies, so there's no cookie pop-up to click through. If you log into a client dashboard, we store a small marker on your own device to keep you signed in — nothing is shared with anyone else. Our anti-spam check (Cloudflare Turnstile) may set a short-lived cookie purely to tell people from bots.

Why we use it

• To reply to your enquiry and, if you go ahead, to build and look after your site.
• To take payment for your plan and keep your account running.
• To do the “getting found” work you're paying for (such as your Google Business Profile), on your behalf.
• To keep the website secure, stop spam, and make it better.

Our legal bases are: performing our contract with you (building and running your site), our legitimate interests (replying to enquiries, keeping things secure, understanding site usage), and legal obligations (keeping tax records).

Who processes it for us

Only the services we need to run things. We'll never sell your information to anyone.

• Cloudflare — hosting, our anti-spam check (Turnstile), and cookieless Web Analytics.
• Supabase (EU region) — client accounts and the enquiries sent to client sites.
• Resend — the transactional emails we send (enquiry notifications, login and account emails).
• Setmore — the booking calendars on our sample sites (demo accounts).
• Stripe — subscription billing and card payments.
• Google — for the Business Profile work we do on your behalf, and our own business email.

International transfers

We keep data in the UK and EU wherever we can. Cloudflare and Resend may process some data in the United States; where they do, transfers are covered by standard contractual clauses (and the UK addendum) so your data keeps the same protection.

How long we keep it

• Enquiries and leads: 24 months from the last contact, then deleted.
• Client accounts: for as long as your account is open, then deleted within 30 days of closure — except billing records, which we keep for as long as tax law requires.
• Visitor stats: aggregated only; nothing identifies you individually.

Ask us to delete what we can sooner, and we will.

Your rights

You can ask to see the information we hold about you, correct it, have it deleted, restrict how we use it, or receive a copy to take elsewhere. Just email [email protected] and we'll sort it, normally within a month. If you're ever unhappy with how we've handled your data, you can complain to the UK regulator, the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to put it right first.

Changes to this policy

If we update this policy we'll change the date at the top. For anything significant, we'll let customers know directly.

Contact

Questions about your data? Email [email protected] or message us on WhatsApp — a real person answers.