Privacy
This explains what personal information we keep, why, for how long, and what you can ask us to do with it. We keep as little as we can.
Who is responsible
GAO Group Ltd, trading as d-ployed, is the controller of your information. Registered in England and Wales, company number 16981887, registered office 3rd Floor, 86–90 Paul Street, London EC2A 4NE. Contact: hello@d-ployed.com.
What we keep, and why
Your account
Your email address and a scrambled form of your password (we never see the password itself). Needed to run your account: that is our contract with you.
Your orders
What you tell us about the site you want, your business name, the quotes and agreements, and what we built. Needed to provide the service (contract), and kept as business records (legal obligation).
Images you send us
We clean every image when it arrives: the location and camera details phones record are removed before it is stored, and never reach your site. Used only to build your site (contract).
Payments
What you paid and when, and your balance. Card details go straight to our payment provider; we never see or store them. Kept because the law requires financial records (legal obligation).
Emails we send you
Your verification link, quotes, order confirmations, "your site is ready", and hosting balance warnings. These are part of the service. We do not send marketing, and we do not use tracking pixels.
Visitors to our website
We use one cookie, which keeps you signed in. It is essential, so we do not ask for consent. There are no analytics, advertising or tracking cookies, and our pages load nothing from third parties.
If we host your site, or run its contact form
For these, you decide what your site collects from its visitors and we act on your behalf (you are the controller, we are your processor).
- Contact forms: a visitor's message is passed straight on to your email address and is not stored by us. To stop abuse we keep a scrambled, non-reversible form of the sender's internet address for 30 days, and nothing else.
- Hosting: we measure how much data your site sends, to charge for it. Our hosting provider keeps standard server logs for security, as any web host does.
If your site collects personal information, you may need your own privacy notice for it. Your guide explains what your site does.
Who else handles it
We use service providers who process information only on our instructions: cloud hosting and storage, payment processing, email delivery, and the technology services that produce the sites we build. None of them may use your information for their own purposes. Some are based outside the UK, including in the United States; where that happens, the transfer is protected by UK adequacy regulations or the UK's approved data transfer agreements. We never sell your information.
How long we keep it
- Images you send us: deleted 180 days after upload.
- Your finished site's files: kept 400 days, so you can download them again and so a hosted site can be restored.
- Contact-form abuse records: 30 days.
- Your account: while it is open. When you close it we delete it, except for payment and order records, which we must keep for 6 years.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, or to have it in a form you can take elsewhere. Email hello@d-ployed.com; we reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk), though we would like the chance to put it right first.
Changes
If we change how we use your information, we will update this page, and email you if the change matters to you.