Legal

Privacy Policy

Last updated 27 October 2026. Plain English, no small print tricks.

1. Who is responsible for your data

Wee Sites is the trading name of Kristian Sokol, an individual trader based in Galicia, Spain. That makes us the data controller for the information described here. Contact: hello.coachkris@gmail.com.

2. What we collect

• What you give us: your name, email address, and anything you write in a form or send by email, including the details of a project you ask about.
• Payment data: handled entirely by Stripe. We receive confirmation that a payment succeeded and the email address and name attached to it. We never receive or store your card number.
• Site analytics: pages viewed, the site that referred you, approximate country, device type and browser. Collected with Umami, which does not use cookies or fingerprint you.
• Technical data: standard server logs from our host, including IP address, needed to run and secure the site.

3. Why we use it

• To deliver what you bought, including download links and call bookings.
• To answer your messages and give support.
• To keep records of sales for tax and accounting, which we are required to do.
• To understand which pages are useful, so the site gets better.
• To send you updates about products, but only if you asked for them. Every email has a one click unsubscribe.

4. Our legal basis

We rely on performing our contract with you for orders and support, on legal obligation for tax records, on our legitimate interest in running and improving a small studio website for analytics and site security, and on your consent for any marketing email you opt into.

5. Who else sees it

Only services that make the site work: Stripe for payments, Vercel for hosting, Umami for analytics, and our email provider for correspondence. Each one only gets what it needs. We do not sell your data, and we do not share it for advertising.

6. Where it goes

Some of those providers process data outside the EU and UK. Where that happens, transfers are covered by standard contractual clauses or an equivalent safeguard recognised under GDPR and UK GDPR.

7. How long we keep it

Order and tax records for the period Spanish law requires, currently six years. Emails and enquiries for up to two years after the last contact. Analytics data in a form that does not identify you, for as long as the site runs.

8. Cookies

This site sets no advertising or tracking cookies. Analytics runs without cookies. If that ever changes, a consent banner will appear before anything loads and this page will say so.

9. Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing based on legitimate interest, and ask for it in a portable format. Ask by email and we will respond within one month. If we have sent you marketing, you can stop it at any time with the unsubscribe link or by asking us.

10. Complaints

If we get something wrong, tell us first, we will try to put it right. You also have the right to complain to a supervisory authority: the Spanish data protection authority (AEPD) where we are based, or the Information Commissioner's Office (ICO) if you are in the UK.

11. Security

The site is served over HTTPS from static infrastructure with no database of customer accounts. Payments are processed by Stripe, which is PCI compliant. Access to our own accounts is limited and protected by two factor authentication.

12. Children

Our products are for adults. We do not knowingly collect data from anyone under 18. If you think a young person has sent us details, tell us and we will delete them.

13. Changes

When this policy changes, the date at the top changes with it. Substantial changes that affect you will be mentioned on the site.

Back to the playbook  ·  Terms and Conditions