What we do with your data, which is not much.
Last updated 12 September 2026
This notice explains what personal data Out2U collects when you use out2u.com or buy something from us, why we collect it, and what your rights are. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Out2U is the trading name of Out2u Web Design, Taunton, Somerset, TA1 4YD. We are the data controller for the personal data described here. Contact us at hello@out2u.com.
2. What we collect and why
| When | What | Why, and our lawful basis |
|---|---|---|
| You email us | Your name, email address, anything you put in the message, and the address of your website if you send it. | To reply to you and, if you ask, to build your mockup. Lawful basis: taking steps at your request before a contract, and performing that contract. |
| You pay for a mockup or a build | Payment is taken by Stripe on Stripe's own pages. We do not see or store your card number. Stripe passes us your name, email address, the amount paid and a payment reference. | To deliver what you bought and keep the records the law requires. Lawful basis: performing the contract, and our legal obligation to keep accounting records. |
| You visit the site | Our web server keeps standard access logs: your IP address, the pages requested, the time, and your browser type. | To keep the site secure and diagnose faults. Lawful basis: our legitimate interest in running a secure website. |
| You visit the site | The page loads its fonts from Google Fonts. When it does, your browser sends your IP address to Google. | So the page shows the right typeface. Lawful basis: our legitimate interest in the site looking as designed. See our cookie policy. |
We do not use analytics tools, advertising trackers, or social media pixels. We do not buy data about you and we do not sell it.
3. Who we share it with
- Stripe Payments UK Ltd processes payments. Stripe is a controller in its own right for the payment data. See Stripe's privacy policy.
- Our hosting provider, IONOS, on a server in the UK, stores the website and its server logs on our behalf.
- Google LLC receives your IP address when the fonts load, as described above. See Google's privacy policy.
- Our email provider stores the emails you send us.
We do not share your data with anyone else unless the law requires it.
4. Transfers outside the UK
Stripe and Google may process data in the United States. Both rely on the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework. Ask us if you want a copy of the safeguards.
5. How long we keep it
- Emails and mockup files: 12 months after our last contact, then deleted.
- Payment and invoice records: 6 years after the end of the tax year, as HMRC requires.
- Server logs: 30 days.
- Finished work for your site: for as long as you are a customer, plus 12 months, unless you ask us to delete it sooner.
6. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or hand it to you in a portable format. You can object to processing based on our legitimate interests. Email hello@out2u.com and we will reply within one month.
If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security
The site is served over HTTPS. Payments never touch our server. Access to email and hosting is protected by strong passwords and two-factor authentication.
8. Children
This site sells a business service and is not aimed at children under 18. We do not knowingly collect their data.
9. Changes
If we change this notice we will update the date at the top. Big changes will be flagged on the home page.