Privacy Policy — Featherkite
Last updated: 16th September 2026
Who we are
Featherkite is a trading name of John Maxwell Ltd, a company registered in England and Wales (Company No. 7905310, VAT No. 370 8323 02), which operates featherkite.com, featherkite.studio, and the web applications we build and host for clients.
For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), John Maxwell Ltd is the “data controller” for the personal data described in this policy.
- Registered address: 6, Oaklands Court Tiverton Way, Tiverton EX16 6TG
- Contact for privacy matters: max@featherkite.com
- ICO registration number: [ICO NUMBER]
The information we collect
When you contact us or enquire. If you fill in a contact or enquiry form, or email us, we collect your name, email address, phone number (if provided), and whatever you tell us about your business or project.
When you visit our websites. Like most websites, we collect limited technical information automatically — such as your IP address, browser type, and the pages you view — through cookies and similar technologies. See “Cookies” below.
When you become a client. We hold the business contact details and project information needed to deliver and support your website or app — for example, domain and hosting details, and the content and data required to build and run your site.
Data within apps and sites we host. For applications and websites we build, we act as a “data processor” on behalf of our clients (who are the controllers of their own users’ data). We only process that data to provide and maintain the service, under our agreement with the client.
How we use your information, and our lawful bases
We use personal data to: respond to enquiries and provide quotes; deliver, host, support and maintain websites and applications; send service-related communications; manage our contracts and take payment; and meet our legal and accounting obligations.
Our lawful bases are: legitimate interests (to respond to enquiries and run our business); performance of a contract (to deliver services you’ve engaged us for); legal obligation (for example, keeping accounting records); and consent where required (for example, certain cookies or marketing).
Who we share it with
We don’t sell your data. We share it only with the service providers we rely on to run our business, and only as far as needed. These include:
- SiteGround — website hosting and backups
- Vercel — application hosting
- Supabase — application databases, authentication and file storage
- Stripe — payment processing (for applications that take payment)
- Resend — transactional and notification email
- GetAddress.io — UK postcode/address lookup (where used in an app)
- Google Workspace — our own email and productivity tools
- ManageWP — website update monitoring
Each of these acts as our processor under appropriate data-protection terms. We may also disclose data where required by law.
International transfers
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK-approved standard contractual clauses or an adequacy decision) to keep your data protected to UK standards.
How long we keep it
We keep enquiry data for as long as needed to respond and for a reasonable period afterwards. Client and contract data is kept for the duration of our relationship and for as long as we’re legally required to (for example, accounting records are kept for at least six years). We don’t keep personal data longer than necessary.
How we protect it
We take security seriously. Data is held on reputable, secured platforms; access is limited to those who need it; secrets and credentials are protected; and we follow a documented security standard across the applications we build. No system is ever perfectly secure, but we work hard to keep your data safe.
Your rights
Under UK data protection law you have the right to: access the personal data we hold about you; ask us to correct it if it’s wrong; ask us to delete it in certain circumstances; object to or restrict how we use it; and request a copy in a portable format. To exercise any of these, contact us at max@featherkite.com.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to put things right first.
Cookies
Our websites use cookies to function and to understand how they’re used. Essential cookies keep the site working; analytics or preference cookies are used only where permitted. You can control cookies through your browser settings.
Children
Our services are aimed at businesses and are not directed at children. We don’t knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it last changed.
Contact
Questions about this policy or your data? Email max@featherkite.com or write to John Maxwell Ltd, 6, Oaklands Court Tiverton Way, Tiverton EX16 6TG.
