Privacy policy

1. Who is responsible for your information?

Lee Searle is the data controller for enquiries to foxes.company and our own client accounts. For privacy questions or requests, email theden@foxes.company or call +44 7812 635828.

When we host or manage enquiries for a client’s own website, that business normally controls its customers’ information and we process it on their behalf. Please contact that business first about its customer records.

2. What we collect

• Names, business names, email addresses, phone numbers, website addresses and the information you provide in enquiries or project discussions.
• Client account details, proposals, approvals, change requests, messages, uploaded photos and files, and service settings in The Den.
• Invoices, payment status, subscription details and payment references. Stripe processes payment details; we do not store your full card number or security code.
• Website and preview usage: visited page paths, referring website, device category, visit times, a browser-generated visitor identifier and actions such as referral opens. Access-link query keys are not included in page analytics.
• Security and delivery information needed to operate the service, such as sign-in sessions, email delivery status and notification subscriptions if you enable alerts.

Only provide information relevant to your enquiry or service. Please avoid sending sensitive personal information unless we have agreed a suitable way to handle it.

3. Why we use it & our legal bases

• Enquiries and service delivery: to respond, prepare quotes, build and manage your website and provide support — taking steps at your request before a contract, or performing our contract.
• Billing and records: to collect agreed payments, manage missed payments and meet tax and accounting duties — contract and legal obligation.
• Security and service improvement: to protect accounts, resolve faults and understand service use — legitimate interests, balanced against your rights. Any consent required for browser storage remains a separate requirement.
• Service communications: to send replies, payment notices and monthly website reports — contract or legitimate interests in keeping clients informed.
• Optional permissions: where processing requires consent, you can withdraw it without affecting earlier lawful processing. Browser notification and microphone permissions are optional.

We do not sell personal information or make decisions with legal or similarly significant effects solely by automated processing.

4. Browser storage & cookies

The site uses browser storage as well as any cookies required by connected services. Sign-in and preferences help keep the service working. Public-page analytics use a stored visitor identifier (fx-vid); referral links save a referrer (fx-ref) and an already-counted marker. These identifiers can persist until cleared from your browser.

A saved referral can be attached to a later enquiry even if the referral banner is no longer visible. Dismissing that banner is remembered for the browser session. Client apps also remember settings and dismissed notices.

You can clear or block cookies and site storage in your browser settings, although sign-in, saved settings or referral attribution may stop working. This notice is not itself a request for consent: the current site does not provide a separate analytics consent selector.

5. Who receives information?

We share information only as needed to deliver and protect the service or meet legal obligations. Service providers include Lovable Cloud for hosting, account services and storage; Stripe for payments; and email delivery providers for messages and service notices. They receive the information needed for their part of the service.

Optional AI growth scans use the website and business information needed to generate a report through Lovable’s AI service. External links and embedded media may connect to their own providers. Our fonts are loaded from Google Fonts, which receives connection information such as your IP address when your browser requests them.

Some providers may process information outside the UK. Where UK data-protection law requires it, overseas transfers must be covered by an adequacy decision or appropriate contractual safeguards. Contact us for details relevant to your service.

6. How long we keep it

Raw website, site-hit and preview-visit records are automatically removed after 90 days. Browser identifiers and preferences remain separately on your device until cleared or replaced.

Enquiries, messages and project records are kept while needed for follow-up, service delivery, support or resolving disputes. Billing and accounting records are kept for applicable statutory periods. Some records may need to be retained after an account closes for legal reasons; backups may remain until replaced under the provider’s retention arrangements.

Contact us if you would like particular records deleted. We will explain any reason we need to retain them.

7. Keeping information safe

We use access controls and protected client access to restrict account information. Keep your client link and sign-in details private, and contact us if you think someone else has accessed your account. No online service can guarantee absolute security.

In-app voice calls use browser-to-browser audio with signalling through our service; calls are not recorded by the call feature.

8. Your rights & complaints

Depending on the circumstances, you can ask to access, correct or erase your information, restrict processing, receive a portable copy, or object to processing based on legitimate interests. You can withdraw consent where it is the legal basis. We may need to verify your identity and normally respond within one month, subject to lawful extensions.

Email theden@foxes.company to make a request. If you are unhappy with how we handle it, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

9. Changes to this policy

We update this policy when our services or obligations change. The date above shows the latest revision; material changes affecting clients will be communicated where appropriate. See also our Terms & Conditions.