Privacy Policy

1. Who We Are

Sitewright Labs is the data controller for the personal data processed through sitewrightlabs.com.

2. What We Collect

• Order and account details — your name, email address, and billing address.
• Payment information — handled by our payment processor; we don't store your full card details.
• What you submit — the brief and any text or reference material you provide so we can produce your draft.
• Technical data — your IP address and basic usage information, used to keep the service secure and working.

3. Why We Use It, and Our Legal Basis

• To provide the service and fulfil your order — to perform our contract with you.
• To keep the site secure and prevent abuse — our legitimate interest.
• To meet legal obligations, such as keeping accounting records required by Danish law.
• Where we ask for it, on your consent — which you can withdraw at any time.

4. Who We Share It With

We share personal data only with the service providers that help us run Sitewright, each acting on our instructions and under a data processing agreement:

• Hosting: Vercel Inc. — hosts this site and any site we host for you, and processes server logs.
• Domains and email: Simply.com A/S (Denmark) — domain registration and mailboxes.
• Payments: our payment processor, which handles your card details directly.
• Drafting your site: the provider that turns your brief into a draft.
• Images: our stock photography provider.
• Security and analytics: the tools we use to keep the service safe and working.
• Contact form: Resend — delivers the messages you send through our contact and project-brief forms to our inbox.

We do not sell your data. If we change provider, this list is updated.

5. Transfers Outside the EU

Some of these providers are based outside the EU/EEA, for example in the United States. Where that is the case, the transfer is protected by appropriate safeguards, such as the EU Standard Contractual Clauses.

6. How Long We Keep It

We keep your order and account data for as long as you use the service and for a reasonable period afterwards. Accounting records are kept for five years, as required by the Danish Bookkeeping Act (Bogføringsloven). We delete or anonymise data once it is no longer needed.

7. Your Rights

Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to its use, and receive a copy in a portable format. You can also withdraw any consent at any time. To exercise these rights, email admin@sitewrightlabs.com.

8. Complaints

If you believe we have handled your personal data improperly, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby — datatilsynet.dk.