checkoutfix.com
Fix my site

Privacy policy

Last updated: 1 September 2026

Publishable draft. This policy is written to align with the UK GDPR and the Data Protection Act 2018. Confirm the company details and your ICO registration before publishing.

1. Who is responsible for your data

CheckoutFix Ltd (United Kingdom) is the data controller for the personal data described here. Registered office: [Registered office address — set in settings]. For any privacy query, contact [email protected].

2. What we collect

  • Account details: your name, email address and organisation.
  • Job details: the sites you add, the issues you report, messages and files you share with us.
  • Website access credentials you choose to store, which are encrypted at rest and only revealed to engineers working on your job (each reveal is logged).
  • Payment records: the amount, VAT, status and reference. Card details are handled by our payment provider (Stripe); we do not store your full card number.
  • Basic technical logs needed to run and secure the service.

3. Why we use it (lawful bases)

  • Contract: to provide the repair you asked for, take payment, and support you.
  • Legitimate interests: to secure our service, prevent abuse, and keep an audit trail of credential access.
  • Legal obligation: to keep tax and accounting records (including VAT invoices).

4. How we protect credentials

Website logins you store are encrypted at rest using authenticated encryption. Plaintext credentials are never written to our logs. Every time an engineer reveals a stored login, we record who did so and when, and you can see that access log.

5. Sharing

We share data only with service providers who help us operate — for example our payment provider and hosting/database provider — under appropriate agreements. We do not sell your personal data.

6. Retention

We keep job records and invoices for as long as needed to provide the service and to meet legal and tax obligations. Stored credentials are kept only while your site is active with us; you can ask us to delete them at any time.

7. Your rights

You have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, and to data portability. To exercise any right, email [email protected]. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Changes

We may update this policy from time to time. We'll change the date at the top when we do.