Privacy
Privacy Policy
How we handle your data. Plain English, no legalese.
Last updated: 10 September 2026
This policy explains how grn.haus ("we", "us", "our") collects and uses your personal data. We're registered in England and Wales.
What we collect
When you subscribe to our services or contact us, we may collect:
- Your name and business name
- Email address
- Phone number (if you contact us via WhatsApp)
- Payment information (processed securely by Stripe, we never see your full card details)
- Website content you provide to us (text, images, business information)
- Messages you send us via WhatsApp, email, or our contact form
How we use it
- To build and maintain your website
- To process your subscription payments
- To respond to your enquiries and update requests
- To send you important service updates (e.g. if your site is down, or we need to confirm a change)
We don't send marketing emails unless you've opted in. We don't sell or share your data with anyone for marketing purposes. Ever.
Lawful basis
We process your personal data on the following legal grounds:
- Contract performance: we need your data to provide the services you've subscribed to (building your website, processing payments, making updates)
- Legitimate interest: to send you important service communications and to showcase your website in our portfolio and social media
- Legal obligation: to keep financial records as required by HMRC
Payment processing
Payments are handled by Stripe. When you subscribe, your card details go directly to Stripe's secure servers. We receive confirmation of payment but never see or store your full card number.
Cookies
This website uses essential cookies required for the site to function. We also use the Meta Pixel, which sets cookies and reports back to Meta so we can measure how well our Facebook and Instagram adverts perform. It tells us that someone arrived from an advert, not who you are.
If you'd rather not be tracked by it, an ad blocker or your browser's tracking protection will stop it, and the site works exactly the same without it.
Website analytics
We run our own analytics, on our own server, rather than handing your visit to Google. It records which pages were viewed, which buttons were clicked, roughly where in the world the visit came from, and what kind of device it was on. There are no third parties involved and nothing is sold or shared.
It also records how pages are used, so we can watch back an anonymous replay of a visit and see where the site confused someone. That is what it is for: fixing the site. A replay shows movement, scrolling and clicks. It does not capture anything you type into a form, and it is not tied to your name or email.
As with the pixel, an ad blocker or your browser's tracking protection will stop it, and the site works exactly the same without it.
Where your data is stored
Your data is stored on servers within the UK and EU. Payment data is processed by Stripe in accordance with their privacy policy. We use industry-standard security measures to protect your information.
How long we keep it
We keep your data for as long as you're a subscriber, plus 6 years after cancellation (for tax and accounting purposes, as required by HMRC). Messages and website content may be deleted sooner unless we need them for our records.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to processing of your data
- Request a copy of your data in a portable format
To exercise any of these rights, contact us at hello@grn.haus.
If you're not happy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO).
Changes to this policy
We may update this policy from time to time. If we make significant changes, we'll let you know by email or through our website.