Privacy and Cookie Policy

Last updated: July 2026

This policy explains what personal information is collected through this website and how it is used.

Information collected

Information may be collected when you:

  • download the free checklist or join the mailing list

  • contact the business

  • purchase the Small Business Website Kit

  • browse or interact with the website

This may include your email address, name, billing details, order information, messages and information about how you use the website.

Payments are processed through Squarespace Payments. When you make a purchase, Squarespace and its payment-service partners process information required to complete the transaction, which may include your name, contact details, billing information and payment details. We do not receive or store your full payment card details. Their processing of your information is governed by their own privacy terms.

How your information is used

Your information may be used to:

  • send the free checklist and its short follow-up email sequence

  • provide information you have requested

  • process and fulfil purchases

  • respond to enquiries

  • manage, protect and improve the website

  • maintain required business, accounting and tax records

The legal basis for using your information will usually be:

  • consent, when you request the checklist and related emails

  • contract, when processing and delivering your purchase

  • legitimate interests, when responding to enquiries or operating and protecting the website

  • legal obligation, when records must be retained by law

You can unsubscribe from marketing emails at any time using the link included in each email.

Who information is shared with

Information is only shared where needed to operate the website and provide its services. This may include:

  • Squarespace, which hosts the website and provides email and ecommerce services

  • the payment provider used at checkout

  • professional advisers or service providers supporting the business

  • public authorities where disclosure is legally required

Personal information is not sold.

Some service providers may process information outside the UK. Where this happens, appropriate legal safeguards will be relied upon.

How long information is kept

Mailing-list information is kept until you unsubscribe or the list is no longer required.

Enquiry information will normally be kept for up to two years after the last contact, unless it is needed for an ongoing matter.

Order, payment and accounting records are retained for as long as required for business and tax purposes. HMRC generally requires self-employed businesses to retain relevant records for at least five years after the applicable tax-return deadline.

Your rights

Depending on the circumstances, you may have the right to:

  • request a copy of your personal information

  • ask for inaccurate information to be corrected

  • ask for information to be deleted

  • restrict or object to how information is used

  • withdraw consent

  • request information in a portable format

Contact hello@smallbusinesswebsitekit.com to exercise these rights. Some rights may not apply where information must be retained for legal or contractual reasons.

Cookies

Cookies are small files stored on your device that help websites function and provide information about how they are used.

This website may use:

  • essential cookies, which are necessary for the website, forms, checkout and security to work

  • analytics cookies, which help show how visitors use the website

  • third-party cookies, which may be used by connected services or embedded content

Non-essential cookies will be restricted unless you accept them through the cookie banner. You can accept or decline them and change your choice using the cookie settings available on the website.

Complaints

Please contact hello@smallbusinesswebsitekit.com first if you have concerns about how your information has been handled.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data-protection regulator.

Changes to this policy

This policy may be updated when the website, services or legal requirements change. The latest version will always be published on this page.