# Privacy notice for site owners and admins

S. Digital & Creative ("we", "us") is a UK business that runs the website platform at sophie-software.dev. This notice is for people who own or manage a website on the platform. We are the controller for the information described below.

For your website's visitors, we act as your processor under the data processing agreement. Visitors can read our privacy notice for visitors, as well as your website's own privacy notice at /privacy.

• Contact details
• What we collect and why
• Lawful bases
• How long we keep information
• Our service providers (sub-processors)
• Sharing information outside the UK
• Your data protection rights
• How to complain

## Contact details

## What we collect and why

• Your admin account: username, a scrambled (hashed) form of your password that we cannot read, and when you last signed in.
• Your privacy details: the name and email address you give us to appear in your website's privacy notice, and the record of when and by whom the data processing agreement was accepted.
• An activity log of admin changes: what was changed, when, and the IP address and browser used. We use this to keep sites secure and to investigate problems.
• Server logs: your IP address, browser details, the page requested and the time, as for every visitor.
• AI assistant use: if you use the built-in assistant, we keep your conversations with it and a record of its usage and cost. The assistant may read information from your website, including visitor information, to do what you ask.
• Connected apps: if you connect an AI agent or app to your site, we keep its name, the access you gave it and its access tokens.
• Support access: to help with a problem, our platform staff can sign in to your site's admin console as an administrator. We only do this to support you, run the platform or keep it secure, and it is recorded.
• Messages you send us: anything you tell us when you contact us.

The admin console loads fonts from Google Fonts, so your browser sends your IP address to Google when you use it.

## Lawful bases

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. You can find out more on the ICO's website.

## How long we keep information

## Our service providers (sub-processors)

We use these providers to run the platform, including your admin account. They also act as sub-processors for your visitors' information, as the data processing agreement sets out.

We will tell you at least 30 days before we add or replace a sub-processor, so you can object.

## Sharing information outside the UK

## Your data protection rights

You have the right to:

• Access: ask for copies of your personal information.
• Rectification: ask us to correct information you think is wrong or incomplete.
• Erasure: ask us to delete your personal information.
• Restriction: ask us to limit how we use your information.
• Object: object to processing that relies on legitimate interests.
• Data portability: ask us to transfer information you gave us to you or to another organisation.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time.

We will respond without undue delay and in any event within one month. To make a request, contact us using the details above.

## How to complain

If you have concerns about how we use your personal information, please contact us first using the details above.

If you are still unhappy after raising your concerns with us, you can complain to the Information Commissioner's Office (ICO):

Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

Last updated: 24 September 2026