Legal

Privacy Policy

Last updated: 6 November 2026

In short: we only collect what we need to run your account and your widgets. We don't sell your data, and we don't use advertising or analytics cookies. This page explains what we collect, why, and your rights.

1. Who is responsible for your data

MYWIDGETBOX LTD (company number [COMPANY NUMBER], registered in England and Wales) is the "controller" of your personal data for MyWidgetBox accounts. Contact us at support@mywidgetbox.co.uk.

2. What we collect

When you create an account and use MyWidgetBox:

• Your email address and a password (stored securely, never in plain text).
• The widgets you create and their settings, such as your business name, messages, colours, WhatsApp number and any images you upload.
• Basic records of your account, such as when it was created and which widgets you own.
• Emails we send you about your account, such as confirming your email address or resetting your password, and any messages you send to us.

When someone visits a website where your widget is installed:

• Their browser loads your widget from our servers, which means we handle standard technical information that browsers send, such as an IP address.
• We record simple counts of events such as a widget being opened or a WhatsApp link being clicked. These records do not include the visitor's name, email address or message contents.

When a visitor starts a WhatsApp conversation from a widget, the conversation happens in WhatsApp, which has its own privacy policy. We do not see or store those messages.

3. Why we use it

• To provide the service you asked for: running your account, saving and showing your widgets. (Legal basis: performing our contract with you.)
• To keep things secure and working: preventing abuse and fixing problems. (Legal basis: our legitimate interests.)
• To contact you about your account and the service. (Contract and legitimate interests.)
• To meet legal and accounting duties, including once payments are introduced. (Legal obligation.)

We do not sell your personal data, and we do not use it for advertising.

4. Cookies and similar technology

We store a small login session in your browser so you stay signed in. This is essential for the service to work. We do not use advertising or analytics cookies. If that changes, we will update this page and ask for consent where the law requires it.

Our website loads fonts from Google Fonts and a code library from the jsDelivr network, which means those providers can see your IP address when you visit.

5. Who we share data with

We use trusted providers to run MyWidgetBox. They process data only on our instructions:

• Supabase, which hosts our database, logins and file storage.
• Resend, which sends our account emails.
• 20i, which hosts our website.
• A payment provider, when paid plans are introduced, to take payments securely.

We may also share information where the law requires it. Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as approved contract terms.

6. If you are a MyWidgetBox customer with website visitors

You decide where you place your widgets, so you are responsible for how your own website handles visitors' personal data, and for any notices it needs.

7. How long we keep data

We keep your account and widgets while your account is open. If you ask us to close your account, we will delete your personal data within a reasonable time, except for anything we must keep for legal or accounting reasons. Simple event counts that do not identify a person may be kept in anonymous form.

8. Your rights

Under UK data protection law you can ask us to access, correct, delete or restrict the use of your personal data, to object to certain uses, and to receive a copy in a portable format. Email support@mywidgetbox.co.uk and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

9. Changes to this policy

We may update this policy and will post the new version here with a new date.