Privacy policy
What personal information we collect, why we have it, who else handles it, the cookies we use, and how to have your data removed.
On this page
The short version
We collect only what we need to build and run your website. We never sell your data, and we use no advertising or tracking cookies.
1. Summary
We collect what we need to build your website, run your account, bill you and help you. We do not sell personal data, we do not share it for advertising, and we do not track you across other websites.
2. Who is responsible for your data
Good N Service LTD (registered in England and Wales, company number 17490512, registered office 128 City Road, London, EC1V 2NX, United Kingdom) is the data controller for the information described in this policy. For any privacy question, or to use any of the rights in section 9, email [email protected]. We answer privacy requests within 30 days.
3. Two different roles
- As a controller, for your own account: your name, contact details, billing details and conversations with us. This policy describes that data.
- As a processor, for data inside your website and email: your visitors, your form submissions and your mailboxes. That data is yours and you decide how it is used. We only access it to run the service, fix a problem or meet a legal requirement. Ask if you need a data processing agreement.
4. What we collect
When you order or hold an account
- Name, business name, email address and phone number.
- Billing address and country, where needed for invoices and tax.
- Your domain names and the services on your account.
- Invoices and payment records. We never see or store full card numbers; card payments are handled by our payment provider.
When you contact us
- What you send by live chat, email or the contact form, including your name, email address, message and any attachments.
- For live chat, basic technical details such as your browser, the page you were on and your approximate location, which help us answer you.
When we build your website
- Details about your business, such as what you do, opening hours, service area and contact details.
- Logos, photos and text you send for your site.
Automatically, when you use our services
- Server logs: IP address, date and time, page requested, response code and browser type, used for security and fixing problems.
- Email logs: sender, recipient, subject line, time and delivery result, used to investigate delivery problems and abuse.
- Control panel login records, including the IP address used.
5. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Building your website and providing hosting, email and domains | Performing our contract with you, or steps you ask for before one |
| Billing and collecting payment | Performing our contract, and legal obligation for tax records |
| Answering live chat, email and form messages | Performing our contract, or legitimate interests before you are a customer |
| Security, abuse prevention and logs | Legitimate interests in keeping the service secure |
| Service, renewal and maintenance emails | Performing our contract |
| Keeping accounting records | Legal obligation |
We do not send marketing email unless you have asked for it. Service emails about your own account are not marketing.
6. Who else handles your data
We work with a small number of trusted providers. Each one receives only what it needs to do its job and may not use it for anything else.
| Type of provider | What for |
|---|---|
| Data-centre provider | The servers your website and email run on |
| Network and security provider | DNS, content delivery and protection against attacks |
| Backup storage provider | Storing encrypted copies of your website |
| Payment providers | Card and cryptocurrency payments |
| Live chat provider | Running the live chat on our website |
| Email provider | Our own business mailboxes |
| Certificate authority | Issuing free SSL certificates (sees domain names only) |
| Domain registries and registrars | Registering domains in your name |
Ask us and we will tell you which company fills each role. We may also disclose information where the law requires it. We do not sell personal data or share it with advertisers or data brokers.
7. International transfers
Some providers may process data in other countries. Where that happens, we rely on an adequacy decision for that country or on standard contractual clauses with appropriate safeguards.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account and contact details | While your account is open, then 12 months |
| Invoices and payment records | 7 years, as tax law requires |
| Live chat, email and form messages | 3 years from the last message |
| Server and email logs | 30 days, longer only during an abuse investigation |
| Website backups | 30 days while active, 30 days after your account closes |
| Demo websites not taken live | Removed after 14 days; your materials deleted within 90 days |
9. Your rights
Depending on where you live, you have the right to:
- Get a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have data deleted when we no longer need it.
- Restrict how we use it while a concern is resolved.
- Receive your data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent where we relied on consent, such as for optional cookies.
- Complain to your data protection authority.
Email [email protected] to use any of these rights. It is free, and we may need to confirm your identity first.
10. Security
- Our websites, control panels and live chat use encrypted connections (HTTPS), and email is sent with encryption wherever the receiving server supports it.
- Each hosting account is kept separate from the others, with its own files and database credentials.
- A firewall and automatic blocking of repeated failed logins protect our servers.
- Backups are encrypted in transit and stored separately from your website.
- Only the people who run the service can access customer data, and only when there is a reason to.
If a breach ever affects your personal data, we will tell you, and the relevant authority where required, as quickly as the law requires.
11. Cookies
Cookies are small files a website stores in your browser. We use a few to keep this site working and secure, and to run live chat. We do not use advertising or tracking cookies.
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
| __cf_bm, cf_clearance | Tell real visitors from automated attacks | Strictly necessary | 30 minutes to 1 year |
| wordpress_*, wp-settings-* | Keep site administrators signed in. Only set if you log in. | Strictly necessary | Session to 1 year |
| Billing area session | Keep you signed in while you manage your account or pay an invoice | Strictly necessary | Session |
| twk_*, TawkConnectionTime | Run live chat and keep your conversation open between pages | Functional | Session to 6 months |
| Cookie consent | Remember your cookie choice | Strictly necessary | 1 year |
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site, such as logging in, from working. If we ever add analytics or other optional cookies, we will ask for your consent first and update this table.
If we host or build your website, the cookies on it belong to your site. We set up a cookie notice for sites we build, but you are responsible for your own site’s cookie compliance.
12. Children
Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you think a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
If we change this policy, we will publish the new version here with a new date. If a change materially affects how we use your data, we will email customers at least 30 days beforehand.
14. Contact
Questions about privacy: live chat, or [email protected].