Privacy Policy

1. Who we are

3 Wee Pages is a product of Towpath Digital Ltd (“we”, “us”), registered in England & Wales, company number 16913912, at Huntingdon Boathaven, The Avenue, Godmanchester, Huntingdon PE29 2AF.

For the personal data described here, Towpath Digital Ltd is the data controller. Any question at all, email hello@3weepages.co.uk and a real person will reply.

2. What we collect

Only what we need to build your website and register your domain.

While you build your site, your answers are saved in your own browser (local storage) so you don't lose your place. Once you give us your email (after the first step), your design is also saved on our servers, so you can carry on from any device. We email you a link back to it and, if you leave reminders on, email you twice about that design if you don't finish (after 2 days and after a week). Those emails are only about your design, and you can stop them from any of them.

Saving a design doesn't sign you up to marketing. Below the save box there is a separate box for news and offers from Towpath Digital about 3 Wee Pages and our other products. It is unticked unless you tick it. Only if you tick it do we record that choice, with the words you saw and when, on Towpath Digital's central customer record (§7), and email you news and offers. You can stop them from any of those emails.

We also count how many designs are started and how many reach each step of the designer, with the kind of business, the look and the page you started from, so we can see where people get stuck. Those counts carry nothing that identifies you or your device: no cookie, no name, no email and no IP address.

3. Our lawful bases

• Contract (UK GDPR Art. 6(1)(b)) — to build your site, register your domain, host it and support you.
• Legal obligation (Art. 6(1)(c)) — to keep financial records for HMRC.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure and working, and to reply when you contact us.
• Consent (Art. 6(1)(a)) — for analytics cookies, which you can refuse (§6), and for news and offers by email, only if you tick the box for them (§2).

4. Payments

Card payments are processed by Stripe, on Stripe's own secure checkout. 3 Wee Pages never receives, stores or has access to your full card number or security code.

When you order, Stripe keeps your card on file so we can take the £49 yearly renewal until you cancel (see our terms). Stripe tells us that a payment succeeded or failed, the amount, the date and your invoices, and we keep a copy of those records (not your card) so we can answer questions and show them in your account. You can update your card or cancel the renewal from your account. Stripe handles your data under its own privacy policy.

5. Your domain and Nominet

When we register a .co.uk for you, it goes in your name: you are the registrant, and it's yours. It sits in our account with Namecheap so we can look after its settings and renew it for you while you're a customer.

To do that we must pass your name and address to Namecheap, the registrar we register domains through, and to Nominet UK, the official registry for .co.uk. Nominet is a separate data controller and handles that data under its own rules. This is unavoidable — nobody can register a .co.uk without it.

If you leave, we release the IPS tag and the domain goes with you. See our Terms.

6. Cookies and analytics

We use Google Analytics 4 to count visits and see which pages are useful, only if you say yes on our cookie banner. Until you do, it isn't loaded at all. Once you say yes, it sets cookies and shares usage data with Google. It tells us “40 people read the pricing page” — not who you are.

The site sits behind Cloudflare, which sets a strictly necessary cookie to keep it fast and protected.

You can block or delete cookies in your browser at any time, or use a tracker blocker — the site still works. We do not use advertising cookies, we don't run ads, and we don't sell or share your data with advertisers or data brokers. Ever.

7. Who we share data with

• Stripe — card payments
• Namecheap and Nominet UK — .co.uk registration (§5)
• Supabase — the database your saved design and order are kept in (hosted in London)
• Cloudflare — security, DNS and delivery
• Google Analytics — usage statistics, only if you say yes (§6)
• Resend, our email provider, to send your saved-design link, reminders, our replies and, if you asked for them, news and offers
• Companies House — only if you ask the designer to look up your company

When you place an order, your business name and contact details are also recorded on Towpath Digital's central customer record (our own system, same company, hosted in London), so we recognise the same business across our products.

That record is how our products know it's the same business: for example, if your business is listed on GotAPal, our free trades directory, we can link that listing to your new site. It doesn't sign you up to any other product, and we don't use it to send you marketing unless you ticked the box for news and offers (§2). If you'd rather we didn't link your business across our products, tell us and we'll stop.

We do not sell your data, and we do not give it to anyone else for their marketing.

8. Where your data lives

Your site and its data are hosted on UK servers, with SSL on by default. Some processors (Google, Stripe and our email provider, for example) may transfer data outside the UK; where they do, they rely on the UK's approved safeguards.

9. How long we keep it

• Order and site content — while you're a customer, and 12 months after you leave, so we can help if you come back.
• A saved design you haven't sent us — ask us to delete it at any time (§10).
• Invoices and payment records — 7 years, because HMRC requires it. That's a legal obligation and applies even if you ask us to delete everything else.
• The record of what you agreed to when you paid — kept with your payment records, for 7 years, so we can show it if there's ever a dispute.
• Domain registration data — held by Nominet while the domain is registered, under their rules.
• Analytics — retained by Google under its standard GA4 retention.

10. Your rights

Under UK GDPR you can ask us to: show you what we hold, correct anything wrong, delete it (subject to the 7-year records above), restrict or stop using it, hand it over so you can take it elsewhere, or withdraw consent for analytics.

Email hello@3weepages.co.uk and we'll do it. We'll respond within one month, and it's free.

11. Security

Data is encrypted in transit (TLS/SSL), access is limited to the people who need it, and we keep backups so your site can be restored if something breaks.

12. Complaints

If you think we've got this wrong, tell us first — we'd rather fix it. If you're still unhappy you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or 0303 123 1113.

13. Changes

If we change this policy we'll update the date at the top, and email customers if it's a significant change.

14. Contact

Towpath Digital Ltd
Huntingdon Boathaven, The Avenue, Godmanchester, Huntingdon PE29 2AF
Company no. 16913912
hello@3weepages.co.uk