1. Who we are
This site is operated by Niche Websites ("we", "us"). We are the data controller for personal data collected through nichewebsites.co.uk.
For any data protection question, contact [email protected].
2. What data we collect
We collect only what we need to run the Service:
| Category | Examples |
|---|---|
| Account data | Name, email address, password (hashed), and (for Managed customers) the domain you want registered. |
| Payment data | Handled by our payment processor. We see the last four digits of the card and the transaction reference — we don't see or store full card details. |
| Site configuration | Settings you enter into the admin panel (colours, logos, affiliate IDs, categories, prompt text). |
| Support correspondence | Emails and messages you send us. |
| Technical data | IP address, browser type, pages visited, referrer — collected in server logs and analytics. |
We do not collect special-category data (health, race, religion, etc.) and don't ask for it.
3. How we use it
- To provide and operate the Service.
- To take payment and manage your subscription.
- To respond to your queries and support requests.
- To send transactional emails (renewal reminders, receipts, security notices).
- To improve the Service — through anonymised or aggregated analytics.
- To comply with legal obligations (tax, fraud prevention).
We don't sell your data, and we don't use it for advertising to you.
4. Legal basis (UK GDPR)
We rely on the following legal bases:
- Contract: to provide the Service you've signed up for.
- Legal obligation: for records we're required to keep (invoices, tax records).
- Legitimate interests: to run and improve our business — for example, keeping the site secure and analysing usage. We balance these interests against your rights.
- Consent: for optional marketing emails, which you can withdraw at any time.
5. Cookies and analytics
We use a small number of essential cookies to keep you logged in and remember your preferences. These don't need consent under UK law.
We may use privacy-respecting analytics (for example, Plausible or self-hosted Matomo) to understand how the site is used in aggregate. If we introduce cookie-based analytics or any advertising cookies, we'll show a consent banner first.
6. Who we share data with
We use a small number of trusted third parties ("subprocessors") to run the Service. Each is bound by contract to process data only on our instructions.
| Provider | Purpose |
|---|---|
| Hosting provider (UK-based) | Runs the servers that host the Service. |
| Domain registrar | Registers domains on behalf of Managed customers. |
| Payment processor (e.g. Stripe) | Takes payment securely. |
| Email provider | Sends transactional emails. |
| AI provider (via your API key) | Generates search suggestions using the key you supply. |
We may also disclose data if legally required (e.g. a court order or valid police request).
7. International transfers
Some of our subprocessors may process data outside the UK — for example, US-based providers. Where they do, we rely on the UK's adequacy decisions, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, as appropriate.
8. How long we keep it
- Account data: for the duration of your subscription plus 12 months, in case you return.
- Invoices and payment records: 6 years, as required by UK tax law.
- Support correspondence: up to 3 years.
- Server logs and analytics: up to 12 months.
Where data is no longer needed, we delete or anonymise it.
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Ask us to delete data (subject to legal retention requirements).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent, where consent is the legal basis.
To exercise any of these, email [email protected]. We'll respond within one month.
10. Complaints
If you're unhappy with how we've handled your data, tell us first and we'll try to fix it. You also have the right to complain to the UK regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk
11. Security
We use reasonable technical and organisational measures to protect your data — including encrypted connections (HTTPS), hashed passwords, restricted access to production systems, and regular backups. No online service can guarantee absolute security, but we take it seriously.
12. Changes to this policy
We'll update this page when our practices change. The "last updated" date at the top reflects the most recent revision. If a change is significant, we'll email you.
13. Contact
Questions about your data or this policy? Email [email protected].