Privacy policy

Last updated 4 September 2026

This page explains what information PageBurst collects, why we collect it, where it is kept and for how long. It is short because we collect very little.

Who is responsible for your data

The data controller is Lightwork Ecommerce Ltd, a company registered in England and Wales with company number 17176001. PageBurst is a Lightwork Ecommerce product. If you have any question about your data, email hello@lightworkecommerce.com.

What we collect, and why

Your brief. The answers you give in the order form: your business name, what you do, the services you want listed, opening hours, the contact details you want shown on the site, and any logo, photos or text you upload. We use these to build your site. Legal basis: performing our contract with you.
Your account. Your email address and login details, so you can sign in to see your site and your order. Logins are handled by Supabase Auth; we never see your password. Legal basis: performing our contract with you.
Payment. Payments are taken by Stripe. When you pay, you enter your card details on Stripe’s checkout page. Card details never touch PageBurst. Stripe tells us that the payment succeeded, the amount, and the name and email address on the payment, and we keep that as our record of your order. Legal basis: performing our contract with you, and our legal duty to keep accounting records.
Emails you send us. If you email us about your site, we keep the correspondence so that we can deal with it and refer back to it. Legal basis: our legitimate interest in running the service and answering you.
Technical information. Like any web server, ours records the IP address, browser type and pages requested for each visit. We use these logs only for security and to find faults. Legal basis: our legitimate interest in keeping the service secure and working.
Your country, once. On your first visit we look at which country your connection appears to come from, so that prices show in a sensible currency. The result is stored as a three-letter currency code in a cookie (see our cookies page). We do not store your location.

What we do not do

We do not sell your data, or share it with anyone for marketing.
We do not run advertising, and we do not track you across other websites.
We do not use analytics services. There are no analytics cookies on this site.
We do not send marketing email. We only email you about your order and your site.

AI and your content

The build is AI-assisted: we use AI tools to help turn your brief into a first draft of your page, and a person at Lightwork checks and finishes every page before it is published. We do not use your brief, your content or your site to train AI models, and we do not permit the AI providers we use to do so either.

Who we share your data with

We share data only with the suppliers we need to run the service, and only what each one needs:

Stripe, which takes payment. Stripe is a data controller for the card details you give it. See Stripe’s privacy policy.
Supabase, which stores your account and your brief and handles login. Our Supabase project is hosted in Supabase’s London (UK) region. See Supabase’s privacy policy.
Our hosting provider, whose UK servers serve your finished site.
AI providers, which receive the text of your brief so that a draft can be produced, on the no-training basis described above.

We do not share your data with anyone else unless the law requires us to.

Where your data is kept

Your account, your brief and your finished site are stored in the UK. Stripe may process payment data outside the UK; it does so under the safeguards described in its privacy policy.

How long we keep it

Your brief, drafts and site files: for as long as we host your site, and for 90 days after hosting ends so that you can still download a copy. If you take your site away to host it yourself, we keep our copy for 90 days in case you need it again, then delete it.
Your account: until you ask us to close it.
Order and payment records: six years from the transaction, which is what UK company and tax law requires.
Emails: for up to two years after the matter they relate to is closed.
Server logs: 30 days.

Your rights

Under UK data protection law you can ask us to give you a copy of the personal data we hold about you, to correct it, to delete it, to restrict how we use it, to give it to you in a portable form, or to stop using it where we rely on legitimate interests. To exercise any of these rights, email hello@lightworkecommerce.com. We will reply within one month.

If you are not happy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would ask you to raise it with us first so that we have the chance to put it right.

Security

Every page on PageBurst is served over HTTPS. Access to your data is limited to the people at Lightwork who need it to build and support your site. Passwords are handled by Supabase Auth and are never stored in a form we can read. Card details are handled by Stripe and are never held by us.

Cookies

PageBurst sets a small number of cookies, none of which track you. They are listed in full on our cookies page.

Changes to this policy

If we change this policy we will update the date at the top of this page. If a change affects how we use data you have already given us, we will email you about it.

Contact

Lightwork Ecommerce Ltd, company number 17176001. hello@lightworkecommerce.com