Home · Privacy
Plain English: what we collect, why, how long we keep it, and how to ask us to delete it. Last updated 1 October 2026.
Orange Rebel builds and runs websites for small businesses in the US. We're based in the UK, so UK data protection law (the UK GDPR and the Data Protection Act 2018) applies to how we handle your data. To contact us about your data, use our contact form.
Your name, business name, phone or email, the plan you're interested in and your message. We use it to build your preview and reply to you. We keep it for up to 12 months, or for as long as you're a client.
Your contact details, address or service area, services, prices, hours, logo, photos and any changes you ask for. We use it to build and run your website. We keep it while you're a client, then for up to 12 months after you leave.
If you use the chat assistant, we keep your messages for 30 days so we can answer you and improve our replies. Then they're deleted. Please don't share payment details in the chat.
Payments go through Stripe. We never see or store your full card number. Stripe keeps billing records as the law requires, and we keep invoices for as long as UK tax law requires (normally 6 years).
We don't sell your data, we don't use advertising cookies, and on client websites we only count visits and taps, with no cookies and nothing that identifies a person. Our legal bases: taking steps toward and performing a contract with you, our legitimate interest in replying to enquiries and improving our service, and legal obligations (tax records).
Some of these companies process data outside the UK, including in the US. Where they do, they use the safeguards UK law requires (such as the UK addendum to the EU standard contractual clauses or the UK–US data bridge).
You can ask to see the data we hold about you, correct it, delete it, or object to how we use it. To do any of these, use the contact form and tell us what you'd like. We'll reply within one business day and act within one month. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).
Each client is responsible for the bookings and enquiries their own customers send through their site. Those requests go straight to the business, by text or email. We build and host the site for them.