Who is responsible
EXCEL SCOTLAND NORTH LTD is the controller for personal data used to operate Sitepace. We provide an online-only self-build and extension project-planning service to customers worldwide from our registered office in Scotland. Privacy questions and rights requests may be sent to support@excelscotnorthh.shop.
What we collect
We collect account identifiers, name, email, telephone number, billing contact details, subscription status, support messages and service records. We receive transaction references and payment status from our payment processors, but not your complete card number or card security code.
Project and generation data
Project descriptions, selected project type, target dates, priorities, generated timelines, tasks, snagging lists, material records, progress logs, communication logs, diagram prompts, recap settings and generated files are processed to provide the requested tools. If file upload or material import is used, we process file name, type, size and contents. Built-in examples are service content and are not associated with a user until selected or edited.
Technical data
We may receive IP address, device and browser information, request time, security logs, cookie choices and coarse location derived from IP.
Collection sources
We collect information directly from you when you create or update an account, enter a project brief, upload or import a file, choose generation settings, contact support, submit a form or manage a subscription. We collect technical and usage information automatically from your browser or device when you visit or use Sitepace, including through strictly necessary cookies, request logs and security records.
We receive limited information from service providers that help us operate the service. Payment providers send transaction references, billing status, subscription events and fraud signals; authentication, hosting, database, storage, email, security and AI providers return account, delivery, request or generation status needed to complete your actions. We may also create service records from your activity, such as project history, generated-output metadata, export events, consent choices and support history. We do not obtain data from data brokers or public profiles for advertising.
Why we use it and legal bases
We process account, project, generation, subscription and support data to perform our contract: create outputs, maintain projects, deliver downloads, manage subscriptions and answer support. We use legitimate interests to secure the service, prevent abuse, diagnose faults, understand aggregate service performance and keep necessary business records. We use consent for non-essential analytics or marketing where required. We process records where necessary to meet legal, tax, accounting, dispute and consumer-protection obligations.
Where UK or EU data-protection law applies, these are the legal bases described above. Where consent is the basis, it may be withdrawn without affecting earlier lawful processing.
International transfers
Our worldwide service may use processors outside the United Kingdom or European Economic Area. Where restricted data is transferred, we use an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful safeguard, together with proportionate technical and organisational measures. Contact us for information about the relevant safeguard.
How long we keep it
Active account and project records are kept while the account is used. Deleted project content is removed from active systems within 30 days and from rolling backups within a further 60 days, unless preservation is required for security, disputes or law. Generated provider links may expire sooner; downloaded copies are controlled by the user. Support records are generally retained for 24 months. Transaction, tax and accounting records are generally retained for 6 years after the relevant financial year. Security logs are generally retained for up to 12 months.
Users can delete project text, generated outputs and uploaded material data from their project workspace or ask support to do so. A request to close an account starts deletion subject to the retention exceptions above.
Security
We use access controls, encrypted transport, restricted server-side credentials, logging, provider access controls and backups appropriate to the service. No internet service can guarantee absolute security. Do not upload secrets, payment-card data, identification documents or information you are not authorised to process. Report suspected misuse to support@excelscotnorthh.shop.
GDPR and CCPA rights
Depending on location, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. UK and EU users may complain to the UK Information Commissioner’s Office or their relevant supervisory authority. We may verify identity and retain a record of the request.
California residents may request to know, correct or delete covered personal information, and may exercise rights without discrimination. Sitepace does not sell personal information and does not share it for cross-context behavioural advertising. An authorised agent may submit a verified request.
Do Not Sell or Share
We do not sell personal information or share it for cross-context behavioural advertising. Therefore, no sale opt-out is required for our present practices. If these practices change, we will update this policy and provide the controls required by applicable law. Browser global privacy control signals are respected for non-essential measurement where our consent tooling supports them.
Automated decisions and children
AI generation organises content but does not make decisions producing legal or similarly significant effects about users. Outputs require human review. Sitepace is not for children under 13. Users aged 13–17 require consent and supervision from a parent or legal guardian, and should not submit personal data about workers or household members without authority.
Questions and complaints
Contact support@excelscotnorthh.shop with “Privacy request” in the subject. We aim to respond within the period required by applicable law. UK users may complain to the Information Commissioner’s Office at ico.org.uk after first giving us an opportunity to address the concern.
Company and contact
Data controller and service provider: EXCEL SCOTLAND NORTH LTD
Registered office: 3 Rashcrook Farm, Elgin, Moray, Scotland, IV30 8SW, United Kingdom
Email: support@excelscotnorthh.shop
Phone: +44 7700179218
Related documents: Privacy Policy, Terms of Service, Refund & Cancellation Policy, Acceptable Use, Content License and AI Disclaimer.