Who we are
Need a Site is the trading name of B. Radwan, a sole trader in the United Kingdom (“we”, “us”). We are the controller of the personal data described below, except for your customers' data on your website, where we act for you (see “Data on our clients' websites”).
Contact: [email protected] · Wigan, United Kingdom
What we collect and why
If you are a client
- Account and business details — your name, email, phone, business name, address, opening hours, prices and the text and photos you add. Why: to build, host and run your website. Lawful basis: contract.
- Payments — handled by Stripe. We see your plan, amounts, invoice status and the last digits of your card, never the full card number. Lawful basis: contract, and legal obligation (accounting records).
- Domain registration — if we register a domain for you, the registry needs the owner's name, address, phone and email. Lawful basis: contract.
- Support messages and emails you send us. Lawful basis: contract / legitimate interests.
If you are a business we contact (a “lead”)
- We use public business information: Google business listings (name, address, phone, category, website), Companies House records, and contact details published on a business's own website.
- We use it to build a free draft website and to tell the business about it — by post, or by email only to limited companies (never to sole traders or partnerships, in line with PECR).
- Lawful basis: legitimate interests — offering a relevant service to businesses that do not have a website. You can object at any time and we will stop (see “Your rights”). Every email has an unsubscribe link; every letter says how to opt out.
If you visit our website
- Essential cookies to run the site and keep you signed in, and — only if you accept — a referral cookie that remembers which leaflet, letter or partner sent you (see the cookie policy).
- Forms are protected by Cloudflare Turnstile to stop spam.
- If you use the chat helper, your question and our answer are stored so we can improve answers and pass it to a person when needed. Questions are answered with an AI service (Google Gemini or Anthropic Claude).
Data on our clients' websites
When someone books, orders or sends an enquiry through a website we host for a client, that information belongs to our client (the controller). We store and send it only to provide the service, following our client's instructions — we are their processor. Questions about that data should go to the business you contacted; we will help them answer you. The terms we work under are in our terms of service.
Who helps us (processors)
| Service | What for | Where |
|---|---|---|
| Oracle Cloud | Server hosting and backups | UK / EU |
| Cloudflare | DNS, domain registration, spam protection, email forwarding | Global (USA) |
| Stripe | Payments and invoices | EU / USA |
| Resend | Sending our emails | EU (Ireland) |
| Namecheap | Domain registration | USA |
| Stannp | Printing and posting letters | UK |
| Business listings (Places), AI helper (Gemini) | USA / EU | |
| Anthropic | AI helper (Claude) | USA |
| Firecrawl | Reading a lead's public website for contact details | USA |
Where data goes outside the UK, it is protected by UK adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement / Addendum. We do not sell personal data.
How long we keep it
- Clients: while your plan is active. When it ends, your site goes offline and everything is kept for 180 days so you can download a backup or come back; after that your site, photos, data and login are deleted automatically.
- Invoices and payment records: 6 years, as UK tax law requires.
- Leads: up to 24 months from when we found the business, then deleted, unless they become a client.
- Opt-outs: if you ask us not to contact you, we keep just enough (your email or phone) to make sure we never do.
- Backups: encrypted, kept up to 30 days.
Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it (we will always stop direct marketing when asked), and to receive it in a portable format. Email [email protected]; we reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113. We'd appreciate the chance to put it right first.
Security
Connections are encrypted (HTTPS), passwords are stored hashed, access to our systems is restricted, and backups are encrypted. Card details never reach our servers.
Changes
We will update this page when what we do changes, and tell clients by email about important changes.