Last updated: 24 July 2026
Groundwork Ltd ("Groundwork", "we", "us") builds and hosts websites for UK trades businesses. This policy explains what personal data we collect, why, and what rights you have over it. We're UK-based and handle personal data in line with the UK GDPR and the Data Protection Act 2018.
This policy covers three groups of people, since Groundwork collects data in different ways for each:
From the sign-up form and your account: business name, trade, location, phone number, email address, and any logo or photos you upload — used to generate and run your website. If you set a password, we store a securely hashed version of it, never the password itself.
From outreach: publicly available business information (name, trade, location, phone, website, Google rating/review count) sourced from services like Google Places, used to build a free preview site and get in touch about it.
From payment: if you go live, card payments are handled entirely by Stripe — we never see or store your full card details. We keep a reference to your Stripe customer/subscription so we can manage billing.
From using the site: standard session cookies to keep you signed in, and basic engagement data on generated preview sites (whether a page was viewed, roughly how long for, and how far someone scrolled) so we can tell whether a preview is actually being looked at.
We use a small number of specialist providers to run the service, each only for what they need to do their job:
We may also link to trusted third-party products relevant to running a trades business (for example, business banking or insurance) via referral/affiliate partnerships. If you click through and sign up, that provider may pay us a referral fee — this never costs you anything extra, and we only link to services we think are genuinely useful. We don't sell your personal data to anyone.
We keep account and generation data for as long as your account is active, and outreach data for as long as reasonably useful for that purpose or until you ask us to stop. You can ask us to delete your data at any time (see "Your rights" below).
Under UK GDPR you can ask us to: give you a copy of your data, correct it, delete it, restrict how we use it, or move it elsewhere. You can also object to processing based on legitimate interests, and withdraw consent for anything consent-based at any time. To do any of this, email [email protected]. If you're not satisfied with our response, you can complain to the UK's Information Commissioner's Office (ico.org.uk).
We use a session cookie to keep you signed in, and nothing beyond that for advertising or cross-site tracking at this time. If that changes (for example, if we add analytics or affiliate tracking cookies) we'll update this page.
Questions about this policy or your data: [email protected].