Privacy policy
This policy explains what personal details we collect when you use ibiswebsites.com, our client portal at portal.ibiswebsites.com and our emails, why we collect them, and the choices you have.
1. Who we are
Ibis Websites is a trading name of EMMV International Ltd, registered in the Republic of Cyprus with company number HE 491820, at Dimokratias 31, 1st Floor, Office 101, 8028 Paphos, Cyprus. We are the controller of the personal details described in this policy. You can contact us about anything in it at hello@ibiswebsites.com.
2. Websites we build for our clients
This policy doesn't cover the websites we build for our clients. When someone sends an enquiry through one of those sites, the business that owns the site decides what happens to it. Each of those sites has its own privacy policy, and we handle the enquiry on the business's behalf under our data processing agreement.
3. What we collect
- Account details: your name, email address, business name, the country your business is based in, and your password. Passwords are stored in a scrambled form that we can't read.
- Information about your business: your answers to our questions, your photos and logo, your reviews, and the change requests and messages you send us.
- Payment information: card payments are handled by our payment provider, Commas. We receive the amount, the date, whether the payment succeeded, the email used to pay and a customer reference so we can take the monthly fee. We never see or store your full card number.
- Technical information: your IP address, browser type and the pages you use in your account. We use your IP address to show prices for your country, to keep the service secure and to stop misuse. On ibiswebsites.com we use it to choose which prices to show, and we don't store it.
- Emails: when you email us, we keep the message and our reply.
4. Why we use your details
- To provide our service under our agreement with you: setting up your account, building and hosting your site, taking payments, sending you enquiries and telling you about your site.
- For our legitimate interests: keeping the service secure, preventing fraud and misuse, answering your questions, improving our service and keeping business records.
- To meet legal obligations, such as keeping accounting and tax records.
- With your consent, where the law requires it. We don't send marketing emails unless you have agreed to receive them, and you can unsubscribe at any time.
5. Cookies and similar technology
ibiswebsites.com doesn't set cookies or use advertising or analytics trackers. Its fonts are loaded from Google Fonts, which means Google receives your IP address when the page loads.
Our client portal stores your sign-in session in your browser so you stay signed in. This is strictly necessary for the portal to work, so we don't ask for consent for it.
6. Who we share your details with
We don't sell your personal details. We share them only with:
- Service providers who help us run our business, under contracts that require them to protect your details and use them only on our instructions. These include providers of website hosting (Netlify), databases and file storage (Supabase), email delivery (Resend), card payments (Commas), and software that helps our team prepare and process website content.
- Professional advisers such as accountants and lawyers, where needed.
- Authorities, where the law requires us to.
- A buyer or successor, if our business or service is sold or transferred, under the same protections.
7. Where your details are stored
Our main database and file storage are hosted in London, in the United Kingdom, which the European Union recognises as giving adequate protection to personal data. Some of our service providers are based in, or process data in, the United States. Where that happens we rely on recognised safeguards, such as the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses and, for UK data, the UK addendum to them.
8. How long we keep your details
- Account and business details are kept while you are a client. After your account closes, we delete your photos and site content within 90 days, unless you ask us to send you a copy first.
- Payment and invoice records are kept for as long as the law requires us to keep business records, usually six years.
- Emails and messages are kept for as long as they are useful for supporting you, and no longer than six years after your account closes.
- Security logs are kept for a short period, usually no longer than 90 days.
9. Your rights
You have the right to:
- ask for a copy of the personal details we hold about you;
- ask us to correct details that are wrong;
- ask us to delete your details, where we don't need to keep them;
- ask us to limit how we use your details, or object to how we use them;
- ask for your details in a format you can take to another provider; and
- withdraw your consent, where we rely on it.
To use any of these rights, email hello@ibiswebsites.com. We will reply within one month. You also have the right to complain to a data protection authority. In Cyprus that is the Commissioner for Personal Data Protection (dataprotection.gov.cy). In the UK it is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to sort out any concern with you first.
10. Keeping your details safe
We use encrypted connections, access controls that limit who on our team can see your details, and providers with strong security records. No system is completely secure, but we work hard to protect your information and will tell you if a problem affects you.
11. Children
Our service is for businesses. We don't knowingly collect personal details from anyone under 18.
12. Changes to this policy
We may update this policy from time to time. If we make a significant change, we will tell you by email or in your account. The date at the top shows when it was last changed.