Privacy notice

1. Who we are

The controller is Digital Lead Experts (Doncaster) Ltd, trading as LocalWebsitesOS (Company No. 13686440, ICO registration ZC040215). Registered office: 5 Windmill Meadow, Norton, Doncaster, England, DN6 9GG. Contact: hello@localwebsitesos.com.

We provide website design, marketing and AI-assisted growth services to businesses only. Information about a business can still be personal data where it identifies a person — for example a sole trader, partner, or a named contact's work email or phone number — and we treat it as such.

2. Data we process

• Business identity and listing data (name, trade, address, website, ratings, opening hours, public reviews summary).
• Business contact data (business email, phone, named contact where publicly given).
• Correspondence with you, including replies, enquiries and call notes.
• Website and project content you or we prepare (text, images, branding, domain details).
• Purchase and billing metadata (what you bought, amounts, dates, invoice records). Card details are handled by Stripe; we do not see or store full card numbers.
• Purchase confirmations: the versions of our terms and policies you accepted and when.
• Website enquiry data submitted through enquiry forms on sites we operate for customers.
• Technical and security logs (e.g. sign-in events, error logs, request records).
• Suppression and opt-out records, so we can honour objections permanently.

3. Where data comes from

Some data is provided directly by you. Where it is not, it comes from publicly available sources used by our discovery and enrichment tools: public business websites, Google Business / Places listings, publicly available directories, public social and business profiles, and other public web sources. We do not buy or use private or leaked data, and we never guess or generate email addresses — we only store contact details actually published on a public source, and we record where they came from.

4. Why we use it and our lawful basis

• Enquiries and contracts — responding to you, preparing previews, delivering a purchased website or service (contract, or steps before entering one).
• Website fulfilment and support — building, publishing, maintaining and supporting your website (contract).
• Payments, accounting and legal obligations — invoicing, tax and record-keeping (legal obligation; contract).
• Service operation and security — keeping our systems secure, preventing abuse, fixing faults (legitimate interests).
• B2B prospecting and direct marketing — identifying businesses that may benefit from our services and contacting them (legitimate interests, always subject to the electronic-marketing rules in section 5).
• Suppression and objection compliance — keeping a record so we never contact someone who has opted out (legal obligation; legitimate interests).

We do not run third-party advertising or analytics cookies on our public site (see section 11).

5. Direct marketing

UK electronic-marketing rules (PECR) treat subscribers differently. Companies and LLPs (“corporate subscribers”) may receive relevant B2B electronic marketing without prior consent. Sole traders and ordinary partnerships are treated as individuals and generally need consent or a valid “soft opt-in” before electronic marketing. Where we do not know which type a business is, we treat it as an individual and do not send cold electronic marketing until that is verified or permission is recorded. Phone calls are screened against the TPS/CTPS rules.

Every marketing message identifies us and gives a simple way to opt out. You have an absolute right to object to direct marketing at any time — reply “stop”, use the unsubscribe link, or email us — and we will add you to our suppression list.

6. Opportunity scoring

We rank publicly available business signals (for example whether a business has a website, its review profile, or site quality) to help a person decide whom to review and contact first. This scoring prioritises human review and outreach; it does not make solely automated decisions that produce legal or similarly significant effects about anyone. You can object to this processing.

7. Who we share data with

We use trusted service providers acting on our instructions, in these categories:

• Payment processing — Stripe.
• Hosting, cloud database, authentication and storage — our cloud platform provider (Lovable Cloud).
• Website building — Lovable, where your website is built on that platform.
• Email and communications delivery providers used to send transactional and business email.
• Public-web data and AI-assisted processing providers used for discovery, enrichment and drafting.

We may also disclose data where required by law or to protect our legal rights. We do not sell personal data.

8. International transfers

Some providers may process data outside the UK. Where that happens, we rely on appropriate UK GDPR safeguards where required.

9. How long we keep it

• Customer, contract and financial/accounting records — as long as required by law and for our legitimate business needs.
• Purchase acceptance records — for as long as the related contract and any claims period may apply.
• Suppression / opt-out records — kept as long as needed to keep honouring your objection.
• Prospect records — reviewed periodically and deleted or anonymised when no longer needed.
• Technical and security logs — kept for a limited period for security and troubleshooting.

10. Your rights

Subject to legal conditions, you can ask to access your data, correct it, erase it, restrict it, object to processing (including an absolute right to object to direct marketing), receive it in a portable format where applicable, and withdraw consent where we rely on consent. Email hello@localwebsitesos.com. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd welcome the chance to resolve your concern first.

11. Cookies and browser storage

Our public site uses only storage needed for it to work — for example keeping operators signed in, securing payments through Stripe checkout, and remembering that you dismissed a banner during your visit. We do not use advertising or third-party analytics cookies.

Last updated 4 October 2026. See also our Terms of Service and Refund & Cancellation Policy.