Privacy Policy
Your privacy matters. Here's exactly how we collect, use, and protect your data — in plain English.
Last updated: April 2026 · Governed by UK GDPR and the Data Protection Act 2018
Data Controller Information
QuickAIWebsite is the data controller responsible for your personal information. We are a UK-based trading name committed to protecting your privacy and complying with UK GDPR and the Data Protection Act 2018.
Trading name: QuickAIWebsite
Email: hello@quickaiwebsite.com
Website: www.quickaiwebsite.com
VAT status: Not VAT registered
What Data We Collect
We collect and process the following types of personal data when you use our services or submit an enquiry:
Contact Information
- Full name and business name
- Email address
- Phone number
- Business address
Business Information
- Industry vertical and business type
- Website preferences and example sites
- Logo files and brand assets
- Content and copy provided for your website
Payment Data
- Payment transaction details (processed securely via Stripe)
- Billing address and invoice information
- We do not store credit or debit card numbers. All payment processing is handled entirely by Stripe.
Usage & Analytics Data
- IP address and browser information
- Pages visited and time spent on site
- Device type and operating system
- Referral source and search terms
How We Use Your Data
We use your personal data only for the following purposes:
Service Delivery
To build, design, and launch your website within the agreed timeframe — 5 business days for Starter/Growth, 10 for Pro.
Payment Processing
To process deposits and ongoing managed service payments securely through Stripe.
Communication
To send project updates, onboarding emails, and respond to your enquiries within 24 hours.
Analytics & Improvement
To analyse website performance using Google Analytics 4 and improve our services based on user behaviour.
AI Content Generation
To generate website copy, meta descriptions, and image prompts using industry-standard AI tools. All AI-generated content is reviewed and refined by our experienced software developers before going live.
Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal grounds:
Contract Performance
Processing is necessary to fulfil our contractual obligations to build and deliver your website.
Legitimate Interest
We have a legitimate interest in improving our services, preventing fraud, and maintaining website security.
Consent
For marketing communications and non-essential cookies, we obtain your explicit consent before processing.
Legal Obligation
We process data to comply with UK legal requirements including tax law and financial record-keeping.
AI Vendor Data Disclosure
AI-Powered Website Creation
We use industry-standard AI tools for content and image generation. Only business information from your intake form is processed by these tools. No payment data, personal identifiers, or sensitive information is shared with AI vendors.
Website Content Generation
Your business name, industry, and brief are used to draft website copy and meta descriptions.
Image Generation
Brand requirements and style preferences are used to generate image prompts and custom graphics.
SEO Optimisation
Business category and location data are used to optimise meta tags, schema markup, and keyword targeting.
AI Chat Assistant Conversations
When a visitor uses the AI Chat Assistant on a client’s website, conversation messages are processed by our AI infrastructure provider (an industry-leading LLM platform). We minimise the data sent and do not include names, payment details, or sensitive personal identifiers in chatbot processing. Conversation logs may be retained by QuickAIWebsite for up to 90 days for quality and retraining purposes, after which they are deleted.
Important: All AI-generated content is reviewed and refined by our experienced software developers before publication. We never share payment card details, national insurance numbers, or other sensitive personal data with AI vendors.
Third-Party Processors
We share your data with the following trusted third-party service providers who help us deliver our services:
Stripe
Payment processing, deposit invoicing, and recurring managed service billing.
Stripe Privacy Policy →Google Analytics 4
Website analytics and performance tracking. IP anonymisation is enabled.
Google Privacy Policy →Cloudflare (Hosting & CDN)
All client sites and this website are hosted on Cloudflare Pages, part of Cloudflare’s global CDN network. Cloudflare may collect standard web log data (IP addresses, request data) as part of normal hosting and traffic optimisation operations. Subject to Cloudflare Data Processing Addendum and Standard Contractual Clauses.
Cloudflare Privacy Policy →Elfsight
We use Elfsight to power the AI Chat Assistant widget embedded on our clients' websites. Elfsight may collect visitor conversation data, IP addresses, and device information as part of widget delivery and functionality. Only used on sites where the AI Chat Assistant is active.
Elfsight Privacy Policy →Brevo (formerly Sendinblue)
Transactional emails including project updates and confirmations.
Brevo Privacy Policy →Zapier
Workflow automation connecting our intake form to project management and invoicing tools.
Zapier Privacy Policy →Note: We take reasonable steps to ensure third-party processors handle your data appropriately. Where we have agreements in place with processors, we require them to maintain appropriate security measures in line with UK GDPR obligations.
Data Retention Periods
We retain your personal data only as long as necessary for the purposes outlined in this policy:
Active Client Data
Retained for the duration of your managed service subscription plus your post-launch support period (30–90 days depending on plan).
Includes: contact info, project files, communication history
Financial Records
Retained for 7 years to comply with UK tax and accounting regulations.
Includes: invoices, payment records, transaction history
Marketing Data
Retained until you withdraw consent or unsubscribe from communications.
Includes: email preferences, newsletter subscriptions
Analytics Data
Retained for 26 months as per Google Analytics 4 default settings.
Includes: anonymised usage data, website performance metrics
Deletion requests: After retention periods expire, your data is securely deleted or anonymised. You can request early deletion at any time by emailing hello@quickaiwebsite.com. Note that financial records must be retained for legal compliance regardless of deletion requests.
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data. These rights apply free of charge:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct any inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Restriction
Restrict processing while accuracy is verified or objections assessed.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
How to exercise your rights
Email us at any time. We will respond within 30 days as required by UK GDPR. There is no charge for exercising your rights.
hello@quickaiwebsite.comContact for Data Requests
For questions about this Privacy Policy, to exercise your data protection rights, or to raise a concern, please contact us:
Response time: We aim to respond to all data requests within 30 days as required by UK GDPR.
Right to Complain to the ICO
Information Commissioner's Office (ICO)
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority. We encourage you to contact us first so we can address your concern directly.
ICO Contact Details
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or through a prominent notice on our website.
Last updated: March 2026