Privacy Policy

1. Data we process

• Customer data: name, business name, email address, phone number, billing details, subscription and invoice history.
• Prospect data: business name, address, phone number, publicly available business email address and public information about the business website. Collected from public sources such as the Google Places API and the business's own website.
• Message data: the messages you send to our WhatsApp number and the photos attached to them, used to update your site.
• Site analytics: page views, clicks on the call and directions buttons, and reservation submissions. Collected without cookies and without identifiers that would identify an individual visitor.
• Support and email correspondence.

2. Purposes and legal bases

• Providing the service, publishing the site and customer support — performance of a contract (GDPR Art. 6(1)(b)).
• Marketing to businesses: producing a website preview and contacting the business about it — legitimate interest (Art. 6(1)(f)). A legitimate interest assessment (LIA) has been documented for the campaign, and every message contains a one-click unsubscribe link.
• Billing and accounting — legal obligation (Art. 6(1)(c)).
• Improving the service and preventing abuse — legitimate interest (Art. 6(1)(f)).

3. Retention periods

• Prospect data: erased or anonymised no later than 180 days after the last contact, and immediately on request.
• Customer data: for the duration of the subscription. Accounting material (invoices) is retained for 6 years as required by the Finnish Accounting Act.
• WhatsApp messages: message content and phone number are deleted after 180 days.
• Personal data in reservations and orders received via the site: anonymised after 365 days (the statistics remain without personal data).
• Site analytics: stored in aggregate form, without visitor identifiers.

4. Recipients of the data (subprocessors)

We use the following service providers. Each has a data processing agreement in place, and transfers outside the EEA are based on the European Commission's Standard Contractual Clauses (SCC).

5. Cookies and tracking

The SiteNow marketing site and the customer sites we publish do not use tracking or advertising cookies, and visitor statistics are collected without cookies.

Only one technical cookie is used: when a private preview link is opened, a session cookie is set so that the images and styles of the preview page load. It contains no personal data.

6. Your rights

You have the right to:

• access your data and request a copy of it,
• have inaccurate data corrected,
• have your data erased (including a business contact removed from our prospect list),
• object to processing based on legitimate interest, including direct marketing,
• request restriction of processing and the portability of your data.

7. Making a request

Send your request to privacy@usesitenow.com. We respond within 30 days. Marketing emails can also be stopped instantly from the unsubscribe link in the message — the address is then added to our suppression list and will not be contacted again.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

8. Security

Data is transferred over an encrypted connection (TLS) and stored on servers located in the EEA. Access is limited to those who need it to provide the service, and administrative access is protected by strong authentication. Data-affecting actions are logged.

9. Changes to this policy

We update this policy as the service develops. The date of the latest version is shown at the top of the page; significant changes are notified to customers by email.