Privacy Notice
Last updated: 10 November 2026
1. Who we are
MillApps ("we", "us") builds and hosts websites for small businesses. We are the "controller" of the personal information described in this notice, which means we decide how and why it is used.
To contact us about your data, email hello@millapps.co.uk.
2. What information we collect
When you complete our website set-up form, we collect what you choose to give us:
- Contact details: your name, email address and phone number (optional).
- Business details: business name and type, where you work, how long you have traded, your goals and the features you want.
- Website content: what you do, services and prices, opening hours, "about" text, social media and website links, style, colour, logo and photo preferences, and domain name ideas.
- Anything else you type into the notes boxes.
When you visit our website, our hosting provider automatically records technical information such as your IP address and the pages requested, in standard server logs. We do not use this to identify you personally.
Please don't put sensitive information (such as health, financial account or ID numbers) into the form. We don't need it.
3. Why we use it, and our legal basis
| What we do | Legal basis (UK GDPR) |
|---|---|
| Read your request, contact you and design and build your website | Taking steps at your request before a contract (Article 6(1)(b)) |
| Run, host and support your website once you become a customer | Performing our contract with you (Article 6(1)(b)) |
| Keep our systems secure and prevent spam and abuse | Our legitimate interests (Article 6(1)(f)) |
| Keep accounting and tax records | Legal obligation (Article 6(1)(c)) |
The tick-box on the form confirms you are happy for us to use your details in this way. We do not use your details for marketing unless you separately agree to it.
4. Who we share it with
We never sell your information. We use a small number of trusted services to run MillApps, and they process data on our behalf:
- Hosting and database: Railway, which stores the form submissions and serves this website.
- Email alerts: Web3Forms, which emails us a copy of your request so we can respond quickly.
- AI tools: to help build your website we may paste the details you supplied (for example your business description, services and prices) into an AI assistant such as Anthropic's Claude. We include only what is needed to build your site.
- Google Fonts: when you load our pages, your browser requests fonts from Google, which means Google can see your IP address.
If you go ahead with a website we may also use a domain registrar and a payment provider, and we will tell you before we do. We may disclose information if the law requires it.
5. Transfers outside the UK
Some of the services above are based in, or store data in, countries such as the United States. Where that happens we rely on the safeguards the law provides for, such as the UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the provider's certification under the UK–US data bridge.
6. How long we keep it
- Requests that don't go ahead: we delete them within 12 months.
- Customers: for as long as you are a customer, plus up to 6 years afterwards for accounting and legal records.
- Server logs: kept by our host for a short period, then deleted.
You can ask us to delete your information sooner, and we will unless we have to keep something by law.
7. Your rights
You have the right to ask us to:
- tell you what information we hold about you and give you a copy;
- correct anything that is wrong or incomplete;
- delete your information;
- restrict how we use it, or object to us using it;
- give you your information in a portable format; and
- withdraw your consent at any time, where we rely on it.
Email hello@millapps.co.uk and we will reply within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.
8. How we keep it safe
Submissions are stored in a password-protected area that only we can open. Our site is served over an encrypted (HTTPS) connection, sign-in attempts are limited, and we keep the number of people with access to a minimum. No system is perfectly secure, but we take reasonable steps to protect your information.
9. Cookies
We don't use advertising, analytics or tracking cookies. The only cookie we set is a strictly necessary sign-in cookie used by us on our private admin page. It is not set for ordinary visitors. Your browser may also save a draft of the set-up form on your own device so you can come back to it; that stays on your device and is not sent to us until you submit the form.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.