Privacy policy

Last updated: 12 October 2026

Riverforge Ltd, trading as RapidWebsites and rapidwebsites.io, is the controller of the personal information described in this policy. We are registered in England and Wales under company number 16827982 at 3rd floor, 86–90 Paul Street, London, EC2A 4NE. Contact us at hello@rapidwebsites.io. You can also call 0118 242 2555.

Information we collect

• Enquiry and contact details: your name, email address, phone number, business name and the information you include in a message, call or form.
• Customer and account details: sign-in details, your website brief, services, preferences, support history and files or images you provide.
• Order and payment records: what you order, billing status, invoices and transaction references. Payment providers process card details; we do not need to store your full card number.
• Website and device information: IP address, browser, device, pages viewed, referrer, interactions and cookie or similar identifiers where the relevant technology is enabled.
• Business website content: information you ask us to publish, including contact details, team details, photographs and customer material.

Why we use it and our legal bases

• To answer enquiries and take steps you request before a contract, and for our legitimate interest in responding to potential customers.
• To provide and manage the service, including building, hosting, maintaining and supporting your website, because it is necessary to perform our contract.
• To take payments and keep business, tax and fraud-prevention records, to perform our contract, comply with legal obligations and protect our legitimate interests.
• To improve and secure our websites and service, where necessary for our legitimate interests, balanced against your rights.
• To measure visits and advertising, build audiences and understand campaigns, where you have given any consent required for non-essential cookies or similar technology.
• To send marketing, where you have consented or where the law otherwise permits it. You can unsubscribe at any time.

Cookies, analytics and advertising

Subject to your choices, we may use Google Analytics 4, Google Ads, Meta, LinkedIn and Microsoft Clarity to measure use of the site, understand advertising and improve the experience. These providers may receive device, online identifier, page, event and campaign information and may process it outside the UK. Strictly necessary technologies do not require consent; non-essential analytics and advertising technologies will only be enabled after the required consent.

Our cookie policy explains the categories, providers and how to change your choices. If we introduce another analytics or advertising provider, we will update the consent controls and policies before using it where required.

Who receives information

We share only what is reasonably necessary with suppliers that help us run the service, such as hosting, email, cloud storage, support, accounting, payment, security and website software providers. If enabled with consent, analytics and advertising providers may also receive information. We may share information with professional advisers, regulators, courts, law enforcement, a buyer of the business, or another person where required by law or needed to establish, exercise or defend legal claims. We do not sell personal information.

International transfers

Some suppliers may process information outside the UK. Where UK data protection law requires it, we use an adequacy regulation or approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, together with any appropriate supplementary measures.

How long we keep information

We keep information only as long as needed for the purpose collected. Enquiry records are normally reviewed after 24 months. Customer, contract and support records are normally kept for the service relationship and then for up to six years where needed for legal, accounting or dispute purposes. Technical logs are normally kept for shorter periods appropriate to security and troubleshooting. Cookie and analytics retention depends on the technology and the choice shown in the cookie controls. We may keep information longer if a legal claim, regulatory requirement or active dispute requires it.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable format; and withdraw consent at any time. Withdrawing consent does not make earlier processing unlawful. You may also object to direct marketing at any time.

To exercise a right, email hello@rapidwebsites.io. We may need to verify your identity. You can complain to the UK Information Commissioner’s Office at ico.org.uk, although we would appreciate the chance to address the issue first.

Security, children and changes

We use proportionate technical and organisational measures intended to protect personal information. No internet service can guarantee absolute security. The service is for businesses and is not directed to children. We may update this policy when our practices, suppliers or legal obligations change; the date at the top shows the latest revision.