Privacy notice
This notice explains which personal data we process when you visit fastsite.app, write to us, ask for a demo or become a customer, and when we contact your business; why we do it; and what your rights are.
Who we are
fastsite is a brand of I/E TOSIU, an Individual Entrepreneur registered in Georgia, identification number 304829112, registered address Nikoloz Baratashvili street N12 / Sanapiro street N2, Tbilisi 0105, Georgia. I/E TOSIU is the controller of the personal data described here.
For anything about your data: [email protected], WhatsApp +44 7418 315761 (messages only).
Contact and demo requests
When you send a form of this site (contact or free demo) we receive what you enter: your name, your phone or WhatsApp number, your business name, your town or area, your e-mail address (optional), your current website (optional) and your message. With the request we keep the page and the language it was sent from, the country reported by our network provider, the technical name of your browser (user agent), the visit of our statistics it came from and a one-way hash of your internet address (against spam and abuse).
We use these details to answer you, to prepare and send your free demo and to follow up on your request. Legal basis: steps you ask for before a possible contract (Article 6(1)(b) UK GDPR and EU GDPR) and our legitimate interest in answering business enquiries (Article 6(1)(f)).
WhatsApp and e-mail
When you write to us on WhatsApp or by e-mail, we receive your number or address, the name you show and what you send us. We use it to answer you and, if you become a customer, to build and run your website. WhatsApp is a service of WhatsApp (Meta), and its own privacy terms apply to how it handles your messages. Legal basis: as for the requests above (Article 6(1)(b) and (f)).
Customers
If you become a customer we process your account (name, e-mail address and the sign-in records of the customer area app.fastsite.app), the details of your business that appear on your invoices, your payments and our messages with you. We use them to build, run and renew your website and to invoice you. Legal basis: the contract with you (Article 6(1)(b)); invoices and payment records are kept because tax law requires it (Article 6(1)(c)).
The statistics of this site
We count how this site is used with our own tool, not with an advertising or analytics company: the pages seen, clicks, how far a page is scrolled, which form fields are used (never what you type), the time on a page, the type of device, the browser family, the country, the site you came from and the campaign tags of the link. Your internet address is stored only as a one-way hash.
Without your consent nothing is stored on your device: each page view is counted on its own and we cannot tell whether you came before. Only if you choose Accept in the cookie bar, a random visit id and a random visitor id are kept in your browser, so that the pages of one visit and a later return are counted together (see the cookie policy).
Legal basis: our legitimate interest in understanding and improving our site (Article 6(1)(f)); for the ids on your device, your consent (Article 6(1)(a) and the cookie rules of the UK PECR and the EU ePrivacy Directive). You can withdraw it at any time with "Cookie settings" at the bottom of every page.
Security and the bot check
Our server and our network provider Cloudflare process technical data, such as your internet address, your browser and the time of a request, to deliver the site and to protect it from attacks and abuse; we limit how often a form can be sent from one address with a hash of that address. When you start to use a form, Cloudflare Turnstile is loaded to check that a person, not a bot, is sending it; for this Cloudflare processes data about your browser and device. Legal basis: our legitimate interest in keeping the site and its forms safe (Article 6(1)(f)).
Businesses we contact
We offer our service to businesses that may need a website. To do this we collect business contact details from the businesses’ own public websites and from public business listings: the business name, its website, its town and kind of business, its contact form, its business e-mail address and phone number and, where the business publishes it, the name of the owner or of a contact person. We use them to send the business a message that offers our service (through its contact form, by e-mail or on WhatsApp) and to record what we sent and any reply.
Legal basis: our legitimate interest in offering our service to businesses (Article 6(1)(f)). We use only contact details that the business itself makes public.
You can object at any time and be removed at once: reply "stop" to our message or write to [email protected]. We then stop contacting you and keep only what is needed to make sure you are not contacted again.
Who else receives data
We do not sell personal data and we use no advertising networks. Only these providers process data for us, each for its own part: Cloudflare (network, security and the Turnstile bot check, in front of every fastsite site), SMTP2GO (the service that delivers our e-mails), WhatsApp (Meta) for WhatsApp conversations, and the company that hosts our server in the United States. We may also disclose data when the law requires it.
International transfers
I/E TOSIU is based in Georgia and our server is in the United States; our providers may also process data in other countries. Where UK or EU data protection law requires safeguards for data that leaves the United Kingdom or the European Economic Area, we rely on the safeguards the law provides, such as adequacy decisions or standard contractual clauses (with the UK addendum where it applies).
How long we keep data
- Contact and demo requests and our conversations: up to 24 months after the last contact, unless you become a customer.
- Customers: the account while you are a customer; invoices and payment records as long as tax law requires.
- Statistics of this site: 400 days.
- Businesses we contact: until they object, and at most 24 months after the last contact. After an objection we keep only what is needed not to contact them again.
- Security records: only as long as they are needed to protect the site.
Your rights
You can ask us for a copy of your data (access), to correct it, to delete it, to restrict its use, and to receive it in a portable form. You can object to any use based on our legitimate interest, at any time, and you do not need to give a reason when it is about offering you our service. Where we rely on your consent you can withdraw it at any time; this does not change what was done before.
Write to [email protected] or on WhatsApp +44 7418 315761. We answer within one month. You can also complain to a data protection authority: in the United Kingdom the Information Commissioner’s Office (ico.org.uk), in the European Union the authority of the country where you live or work.
Other points
- You do not have to give us your details, but without a phone number or an e-mail address we cannot answer a request.
- We make no decisions about you that are based only on automated processing and have legal or similarly significant effects.
- Our service is for businesses and is not meant for children. We do not knowingly collect data about children.
- The websites we build for our customers have their own privacy notices: for the visitors of those sites the customer decides how their data is used, and we process it on the customer’s behalf.
Changes to this notice
We update this notice when our service or the law changes. The date at the top shows the version in force; important changes are announced on this site.