Legal

Privacy Policy

Last updated: May 2026  ·  Freebly, a trading name of Staunton Rook Limited

Summary

We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it and what your rights are. We comply fully with UK GDPR and the Data Protection Act 2018. If you have any questions, please contact us at team@freebly.co.uk.

Contents
  1. Who We Are
  2. Data We Collect
  3. How We Collect Your Data
  4. How We Use Your Data
  5. Legal Basis for Processing
  6. Data Sharing and Third Parties
  7. Data Retention
  8. Your Rights
  9. Cookies
  10. Marketing Communications
  11. Data Security
  12. International Transfers
  13. Changes to This Policy
  14. Contact and Complaints
1

Who We Are

Freebly is a trading name of Staunton Rook Limited, registered in England and Wales. We provide free website design and development services to UK small businesses, subject to a monthly hosting subscription.

For the purposes of UK GDPR, Staunton Rook Limited is the data controller responsible for your personal data.

Registered address: Staunton House, 5 Chantry Court, Sovereign Way, Chester, CH1 4QN
Contact: team@freebly.co.uk

2

Data We Collect

We may collect and process the following categories of personal data:

Identity and contact data

Application and onboarding data

Billing and payment data

Technical and usage data

Communications data

3

How We Collect Your Data

We collect your personal data through the following means:

4

How We Use Your Data

We use your personal data for the following purposes:

5

Legal Basis for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

6

Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of third party where necessary to deliver our services:

Payment processing

We use Stripe to process hosting subscription payments. Stripe acts as an independent data controller for payment processing. You can view Stripe's privacy policy at stripe.com/gb/privacy.

Hosting and infrastructure

Your website is hosted on our infrastructure which may utilise third party hosting and cloud service providers. These providers are contractually bound to process data only on our instructions and in accordance with UK GDPR.

Email and communications

We use third party email and communication tools to manage correspondence and, where applicable, marketing communications.

Legal and regulatory

We may disclose your data to regulatory authorities, law enforcement or legal advisers where required by law or to protect our legal rights.

Important

All third parties we work with are required to respect the security of your personal data and to treat it in accordance with applicable data protection law. We do not permit them to use your data for their own purposes.

7

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements.

8

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access

Request a copy of the personal data we hold about you.

Right to rectification

Ask us to correct inaccurate or incomplete data.

Right to erasure

Request deletion of your data where there is no lawful reason for us to continue processing it.

Right to restriction

Ask us to restrict processing of your data in certain circumstances.

Right to portability

Request your data in a structured, machine-readable format where applicable.

Right to object

Object to processing based on legitimate interests or for direct marketing purposes.

Right to withdraw consent

Where processing is based on consent, withdraw it at any time without affecting prior processing.

Right to complain

Lodge a complaint with the ICO if you believe your data has been mishandled.

To exercise any of these rights, please contact us at team@freebly.co.uk. We will respond within 30 days. We may need to verify your identity before processing your request.

9

Cookies

Our website uses cookies to improve your experience and to help us understand how visitors use our site. Cookies are small text files stored on your device.

Essential cookies

Necessary for the website to function correctly. These cannot be disabled.

Analytics cookies

We may use tools such as Google Analytics to understand how visitors interact with our website. This data is aggregated and anonymised where possible. You may opt out of analytics cookies via our cookie banner.

Marketing cookies

Where you have consented, we may use cookies to deliver relevant advertising and track the performance of our campaigns on platforms such as Meta and Google.

You can manage or withdraw your cookie consent at any time via the cookie settings on our website, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10

Marketing Communications

Where you have given consent or where we have a legitimate interest to do so, we may contact you with information about our services, updates and relevant offers.

You can opt out of marketing communications at any time by:

Opting out of marketing communications will not affect service-related communications such as billing notifications or account updates.

11

Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration.

These measures include:

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) as required by law.

12

International Transfers

Some of our third party service providers may process your data outside the UK or European Economic Area. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO, to protect your data to the same standard as required under UK GDPR.

13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes and update the date at the top of this page. Continued use of our services following notification constitutes acceptance of the updated policy.

14

Contact and Complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).