Privacy Policy
Last updated: May 2026
This policy explains what personal data Already Done collects, how it is used, and your rights under UK GDPR.
Who we are
Already Done is operated by Dean Rougvie, trading as Already Done. Contact: legal@alreadydone.uk
What data we collect and why
Prospect data (businesses we've researched)
We use the Google Places API to identify UK small businesses with limited online presence. We store: business name, address, phone number, category, and any email address associated with the business listing. This is used solely to contact you about our website service. Legal basis: legitimate interests.
Customer data (paying customers)
When you purchase a website, we collect: your name, email address, business name, and payment information (processed by Stripe (we do not store card details)). Legal basis: contract performance.
Website visitors
We use anonymous analytics (page views, form interactions). No personally identifiable data is collected via analytics without consent. Legal basis: legitimate interests.
How we use your data
- To contact you about our website building service (prospects)
- To deliver your website and manage your account (customers)
- To send service-related emails (renewal reminders, support)
- To improve our service through anonymised analytics
We do not sell your data. We do not share it with third parties except as necessary to deliver the service (Stripe for payments, Resend for email, Cloudflare for hosting).
How long we keep it
- Prospect data: deleted after 12 months if no purchase is made, or immediately on unsubscribe request
- Customer data: retained for 7 years for tax and legal compliance, then deleted
- Analytics data: 12 months rolling
Your rights
Under UK GDPR you have the right to: access your data, correct inaccurate data, request deletion, object to processing, and withdraw consent. To exercise any of these rights, email legal@alreadydone.uk. We will respond within 30 days.
You also have the right to complain to the ICO: ico.org.uk
Cookies
We use essential cookies only (session management). No advertising cookies are used.