Privacy policy
Last updated: 5 November 2026
This explains what personal information Teabreak Sites collects, why, who it's shared with, and your rights. It covers people who sign up for a website with us, and people who visit teabreaksites.co.uk.
If you've sent a quote request through a tradesperson's website that we built, that tradesperson is responsible for your information. Their website has its own privacy notice. We handle it on their behalf, as explained in section 7.
1. Who we are
Teabreak Sites is run by Lewis Raybould, trading as Teabreak Sites, Unit 175221, PO Box 7169, Poole, BH15 9EL. We're the "controller" of the information described here, which means we decide how it's used.
Questions or requests: team@teabreaksites.co.uk. You'll get a reply from Lewis, not a ticket system.
ICO registration number: [to be added].
2. What we collect
When you sign up and use your dashboard
- Your name, business name, trade, mobile number and email address.
- What you tell us for your website: services, towns you cover, opening hours, a short description of your business, your logo and photos of your work.
- The web address you want. We register it under Teabreak Sites' own details, so your details aren't sent to the domain register unless you move it to your name.
- Your enquiries, change requests and settings in your dashboard.
- Billing status from Stripe: whether you've paid, your plan and when it renews. We never see or store your full card number.
When you visit our website
- Basic technical information sent by every browser, such as IP address, browser type and the page requested. Our hosting provider uses it to deliver the page and keep it secure.
- If you arrived from one of our adverts, which advert it was, from the tags in the link you followed (such as the advert's name). We keep this with your account if you sign up, so we can see which adverts work.
- If you accepted cookies and then sign up, we also keep your IP address, browser details and Meta's click and browser IDs with your account, to send with the messages to Meta described in section 5.
- We don't use cookies for advertising or tracking unless you agree (see section 9).
When you contact us
- Whatever you include in your message.
3. Why we use it, and the legal basis
| What we do | Legal basis |
|---|---|
| Build, host and run your website, dashboard and domain | Contract: it's what you've signed up for |
| Send you login links, preview links and service messages (site ready, payment failed and so on) | Contract |
| Take payment and keep financial records | Contract and legal obligation (tax records) |
| Check sites before they go live, prevent fraud and spam, and keep the service secure | Legitimate interests: running a safe, reliable service |
| Send you a monthly report on how your site is doing | Contract: it's part of the service. Reply to it or email us and we'll stop sending it. |
| Tell you about new features or offers | Consent, or our legitimate interests for existing customers about similar services. Every message has an unsubscribe link. |
| See which of our adverts lead to sign-ups, from the link you arrived on | Legitimate interests: knowing which adverts are worth paying for. Nothing is shared with Meta for this. |
| Measure our adverts with Meta (the Meta Pixel, and telling Meta when you sign up and first pay) | Consent only (see section 9) |
4. How AI is used
We use Anthropic's Claude to write your website's text and image descriptions from what you tell us. Your onboarding answers and photos are sent to Anthropic to do this. Under Anthropic's commercial terms, they can't use this information to train their AI models. Every site is checked by a person before it goes live.
5. Who we share it with
We don't sell personal information. We use these service providers, who only process it on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, logins and photo storage | Data stored in London, UK |
| Netlify | Hosting our website and your dashboard | USA and global network |
| Cloudflare | Hosting your website and connecting your web address | USA and global network |
| Stripe | Payments and billing | UK, EU and USA |
| Anthropic | Writing website text from your answers | USA |
| GitHub | Running our site builder, which reads your answers and photos to build your site | USA |
| Resend | Sending login links, notifications and enquiry emails | USA |
| Spaceship (our domain registrar) and the domain registry (Nominet for .uk) | Registering your web address (under our details until you move it to your name) | USA and UK |
| Fonts on our website, and showing your Google reviews on your site | USA and global | |
| Meta | Measuring our adverts, only if you agree to cookies. If you do, we also tell Meta when you sign up and when you first pay, so they can match it to the advert you saw. That message includes your email address, phone number and account number, all scrambled (hashed) first, plus your IP address, browser details and Meta's own click and browser IDs. | USA |
When a domain is registered, some owner details go to the registry, as required for all domains. For .uk domains, Nominet doesn't publish an individual's address publicly by default.
We may also share information if the law requires it, or to protect our rights or someone's safety.
6. International transfers
Some providers are based outside the UK, mainly in the USA. Where that happens, we rely on UK safeguards: the UK-US "data bridge" for certified companies, or the UK's International Data Transfer Agreement or Addendum. Ask us for details.
7. Enquiries from your customers
When someone fills in the quote form on your website, we store and deliver that enquiry for you. For that information, you are the controller and we are your processor. Our data processing terms explain the rules we follow. Each customer site has its own privacy notice telling visitors this.
8. How long we keep it
| Information | How long |
|---|---|
| Your account, website content and photos | While you're a customer, then deleted 90 days after your subscription ends (we email you 14 days before, and logging in keeps it). You can delete it yourself at any time. |
| Enquiries | Until you delete them, or until your account is deleted |
| Which advert you came from (and, if you accepted cookies, the IP address, browser details and Meta IDs kept with it) | Deleted with your account |
| Sign-ups that never went ahead | 6 months after your last activity (we email you 14 days before, and logging in keeps it) |
| Billing and invoice records | 6 years, for tax |
| Backups | Overwritten within 7 days |
| Website server logs | Up to 30 days |
9. Cookies and similar technologies
Our website doesn't use cookies to track you unless you choose to allow them.
| Name | What it does | Type |
|---|---|---|
Login session (tb_access, tb_refresh, and tb_login_email for 15 minutes while you log in) | Keeps you logged in to your dashboard | Strictly necessary, so no consent needed |
| Cookie choice (stored in your browser, not sent to us) | Remembers whether you accepted or declined | Strictly necessary |
Meta Pixel (_fbp) | Tells us if someone signed up after seeing our Facebook or Instagram advert | Advertising. Only set if you click Accept. |
Recommendation link (tb_ref, 60 days) | Remembers which customer recommended us, so you both get your free month | Only set when you follow a customer's recommendation link, and cleared once you sign up |
If you accept when you sign up, we also tell Meta from our own server when you sign up and when you first pay (see section 5). If you decline, Meta hears nothing about you from us.
You can change your mind at any time using the Cookie settings link in the footer. If you've already signed up, email us and we'll stop telling Meta about your payment.
Our pages load the Barlow typeface from Google Fonts, which means your browser contacts Google's servers. No cookies are set by this.
Websites we build for tradespeople don't use cookies at all.
10. Your rights
You have the right to:
- get a copy of your information (your dashboard has a Download my data button)
- have it corrected
- have it deleted (your dashboard has a Delete my account button)
- object to us using it, or ask us to limit how we use it
- move it to another provider
- withdraw consent at any time, where we rely on consent.
To do any of these, use your dashboard or email team@teabreaksites.co.uk. We'll reply within one month.
11. Security
Your information is protected by encrypted connections, access rules that stop one customer seeing another's data (tested automatically every time our code changes), and admin access limited to Lewis. Payment details are handled entirely by Stripe.
12. Complaints
Please tell us first and we'll try to sort it out. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
13. Changes
If we make important changes, we'll email customers before they take effect. The date at the top shows when this was last updated.