← Back

Privacy Policy

Last updated: 15 August 2026

This Privacy Policy explains how JW Digital ("we", "us") collects and uses your personal data when you use JW Builder (the "Service"), and your rights under UK data protection law. For the purposes of the UK GDPR, the data controller is JW Digital Services Ltd, company number 15243830, 266 Altrincham Road, Manchester M22 4AA.

1. Data we collect

  • Account data — your name, email address, and a securely hashed version of your password (we never store your password in plain text).
  • Billing data — if you subscribe to Pro, payments are processed by Stripe. We do not store your card details; we store your Stripe customer and subscription identifiers and your plan status.
  • Technical data — your IP address and request metadata, used for security, abuse prevention (rate limiting), and diagnostics.
  • Content — the sites and content you create using the Service.

2. How and why we use your data

  • To provide the Service and your account — lawful basis: performance of a contract.
  • To process subscriptions and payments — lawful basis: performance of a contract.
  • To secure the Service, prevent abuse, and keep records — lawful basis: our legitimate interests and legal obligations.
  • To send service and verification emails — lawful basis: performance of a contract.

3. Who we share it with

We share personal data with service providers who process it on our behalf, under appropriate agreements:

  • Stripe — payment processing;
  • Neon — database hosting;
  • Vercel — application hosting;
  • Cloudflare — storage and delivery of images and files you upload;
  • Google (Gmail) — sending transactional email.

We do not sell your personal data. Where a provider is located outside the UK/EEA, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

4. Visitors to sites built with the Service

Sites created with JW Builder belong to the customers who build them. If you send an enquiry through one of those sites, your name, contact details, and message go to that site's owner — for that data the site owner is the data controller and we store it on their behalf as their processor, under our Data Processing Addendum. Alongside the enquiry we record the sending IP address and browser identifier, which the site owner can see and which are used to protect the form from abuse. Enquiries are deleted automatically 12 months after they are received, or earlier if the site owner deletes them or closes their account.

To exercise your data protection rights over an enquiry, contact the business you sent it to — they control it. If you cannot reach them, contact us and we will help. Published sites do not set advertising or tracking cookies.

5. Retention

We keep your data for as long as your account is active. When you delete your account, we delete your account data and content and cancel any subscription; we may retain limited records where required for legal, accounting, or fraud-prevention purposes.

6. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. You can exercise many of these directly in your account settings, or by contacting us. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

We use a strictly necessary session cookie to keep you signed in. We do not currently use advertising or third-party tracking cookies.

8. Security

We protect your data with measures including encryption in transit, password hashing, and access controls. No system is perfectly secure, but we work to protect your information and to notify you and the ICO of any breach where required.

9. Changes

We may update this policy from time to time. We will update the date above and, where changes are significant, notify you.

10. Contact

For any privacy question or to exercise your rights, contact us via jw-digital.co.uk/contact.