Privacy Policy

1. Introduction

This Privacy Policy (the “Policy”) governs the collection, use and disclosure of your personal data by Goldcote Ltd, the operator of Pick the site (the “Service”).

By using the Service, you agree to the terms of this Policy. If you do not agree, you must not use the Service.

2. Company information and contact

Goldcote Ltd is registered in the British Virgin Islands. Our registered address is Wickhams Cay, Tortola, and you can contact us at hello@pickthesite.com.

3. Data controller and data protection officer

Goldcote Ltd is the controller responsible for your personal data and acts as its own data protection officer. For any question or request about your data, write to hello@pickthesite.com; on request, we tell you the name of the person in charge.

4. Personal data we collect

Your website: your email address, the business details, texts and photos you add, the address you chose and when you accepted our Terms.

Payments: what you bought and when. Your card details go to Stripe and never reach us.

Visitors of the websites: we count page views per day as a number, never a person. Requests sent through a website’s form (name, contact details, message) go to its owner, in the panel and by email. To stop abuse we keep a salted, daily changing fingerprint of the IP address for a short time, never the address itself.

Businesses we write to: see section 5.

Designs on our front door: when you build a website there, we decide how much free design work MoltenRock Frontier AI does for it from what you type, what you add and the country your connection comes from (Cloudflare tells us with each request). We use these only at that moment and keep only the result (a level from one to four), to count. It never changes a price.

5. Businesses we write to

We sometimes write once to a business that has no website, or one that no longer works, to offer it a ready-made site. Goldcote Ltd is responsible for this (contact: hello@pickthesite.com). We use only what is public: the business’s name, its address, public email address and phone number, its opening hours, and public facts about it from OpenStreetMap, its own website and public review pages.

The purpose is one personal offer of a ready-made website, shown on a private link. We rely on these being business details that are publicly available and on our interest in offering our service (Swiss Data Protection Act, Art. 30 para. 3 and Art. 31).

Who processes these details for us: Cloudflare (hosting and database, worldwide network), GoDaddy (Go Daddy Netherlands B.V., servers in the EU) for the message, and Resend (USA) when Pick the site sends an email itself. We never sell them or pass them on to anyone else.

If you don’t become a customer, we delete these details 12 months after our last contact. If you tell us not to write again, we keep only the business’s name and email address on a do-not-contact list, so that we never write to you again.

In the United Kingdom, the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR) apply as well. We email limited companies and LLPs at their published business address; sole traders and partnerships only if they have agreed to hear from us. Every message says who we are and how to stop further messages with one reply. Our basis there is our legitimate interest in offering our service (UK GDPR Art. 6(1)(f)), and you can complain to the Information Commissioner’s Office (ico.org.uk).

You can ask what we keep about you, have it corrected or deleted, and object at any time: reply “no” to our email or write to hello@pickthesite.com.

6. Legal basis for processing

We process personal data on the basis of your consent, our contract with you, our legitimate interests (running a safe service, and offering it to businesses), or legal obligations. For the businesses we write to, section 5 names the basis.

7. How we use personal data

To provide the Service, to keep it safe, to improve it, and to send marketing communications as described in section 5 and in our Terms. We never sell personal data.

8. Retention and deletion

We keep personal data only as long as needed for these purposes, or as the law requires. Your website’s data stays as long as your website exists; when you remove it, we delete its content, photos and requests, and backups disappear within 30 days. Of the emails we send, we keep only that they went out, never their content. Businesses we write to: 12 months after our last contact (section 5).

You can ask us to delete your personal data at any time, and we will, unless the law requires us to keep it.

9. Cookies and tracking

The only cookie we use keeps you signed in to your panel on app.pickthesite.com. Our spam protection (Cloudflare Turnstile) checks the browser without setting cookies in our setup. Websites made with Pick the site set no cookies and use no trackers.

10. Third-party services and transfers abroad

These services process data for us, only for the purposes above: Cloudflare (hosting, database, photo storage, email forwarding, spam protection; our database and photos are stored in the EU and served through Cloudflare’s worldwide network), Resend (sending emails, USA), GoDaddy (the mailbox we write to businesses from: Go Daddy Netherlands B.V., servers in the EU), Stripe (payments, USA and EU; Stripe also processes payment data under its own privacy policy) and Anthropic (the designs on our front door, the assistant and the Studio design, USA: your website’s content, your messages and your photos are sent to its model Claude and aren’t used to train it).

When data goes to a country without an adequate level of data protection, such as the USA, we rely on the safeguards the law requires, such as the standard contractual clauses in our providers’ data processing terms.

11. Data security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Every connection to the Service is encrypted.

12. Data breaches

If a breach of your personal data happens, we notify you and the relevant data protection authorities within 72 hours, unless the breach is unlikely to result in a risk to your rights and freedoms.

13. Your rights

You have the right to access, correct, delete, restrict and port your personal data, and to object to its processing, in particular for marketing. Write to hello@pickthesite.com.

You can also complain to a data protection authority: in Switzerland the FDPIC, in the EU the authority of your country, in the UK the ICO.

14. Children

The Service is not intended for anyone under 16. We do not knowingly collect personal data from children under 16.

15. Changes to this Policy

We may update this Policy from time to time. We tell you about changes, and your continued use of the Service constitutes acceptance of the changes.

16. Governing law and dispute resolution

British Virgin Islands law governs this Policy. Disputes will be resolved in the courts of Tortola, British Virgin Islands. We offer alternative dispute resolution options. This does not limit the rights you have under the data protection law of the country where you live.

17. Contact

If you have any questions or concerns about this Policy, contact us at hello@pickthesite.com.