Your data, looked after.
What data we collect, why, who sees it, and how to ask for any of it. UK GDPR compliant — and written by someone who doesn't talk like a lawyer.
Blinki ("we", "us") is the trading name of Blinki Limited, a company registered in England and Wales. Registered office: York. We're the data controller for the personal information you give us. This notice explains what we collect, why, how long we keep it and the rights you have under the UK GDPR.
What we collect
- Account & contact info: your name, business name, email, phone, billing address.
- Website content: anything you put on your site — text, images, customer enquiries, store orders.
- Usage data: aggregated, non-identifying logs of how the platform is used (for stability and abuse prevention).
- Payment info: handled by Stripe — we only see the last four digits, the brand, and the customer reference.
- Blinki Flex applicants only: Companies House number, registered postcode, director details, plus a soft credit check on your company performed by our credit bureau partner. We do not perform a personal credit check on you as an individual.
Why we collect it (lawful basis)
- To provide the service (contract performance) — building, hosting and supporting your site, processing payments, sending essential service emails.
- To improve the service (legitimate interests) — anonymised usage analytics, error monitoring, security.
- To run credit checks for Blinki Flex (legitimate interests + your explicit consent at the point of application) — we won't run the check without your tick.
- Marketing (consent) — you opt in. You can opt out from any email we send you.
Who we share it with
The bare minimum, and only with processors who have a contract with us.
- Stripe — payment processing.
- Duda — the underlying website-builder infrastructure that powers the Blinki editor.
- Vercel — hosting and content delivery for websites you upload to us yourself.
- Companies House — public-record lookups for Flex applications.
- Creditsafe (or equivalent UK credit bureau) — for Blinki Flex soft checks only, with your consent.
- Google Workspace — email and document storage.
- HMRC / regulators — only where required by law (invoicing records, tax, court orders).
We never sell personal data to third parties. We don't run targeted-advertising cookies on this site.
How long we keep it
- Active customer data — for the life of your account, plus 7 years after closure (HMRC accounting requirement).
- Marketing-only contacts — until you ask us to remove them.
- Failed Flex applications — 24 months (so we can recognise repeat applications), then deleted.
- Anonymised analytics — kept indefinitely as they no longer identify you.
Where it lives
Our servers are in the UK and EU (Google Cloud, Firebase, Duda, Vercel). Some processors (Stripe) operate globally; where data leaves the UK/EU, it is covered by Standard Contractual Clauses and equivalent safeguards.
Your rights
Under the UK GDPR you have the right to:
- Ask for a copy of the data we hold about you (subject access request).
- Ask us to correct anything inaccurate.
- Ask us to delete your data, where there is no overriding legal reason to keep it.
- Object to processing or restrict it.
- Withdraw consent at any time (where we relied on consent).
- Complain to the Information Commissioner's Office if you think we've got it wrong.
To exercise any of these, email privacy@blinki.co.uk. We respond within 30 days — usually quicker.
Cookies
See our cookie policy for the full breakdown. In short: essential cookies only, no advertising trackers.
Changes to this notice
We'll update this page when our practices change and bump the "last updated" date at the top. Material changes affecting your data will be emailed to active customers.
Contact
Questions, requests, complaints — privacy@blinki.co.uk. For non-privacy stuff, see our contact page.
Got a question we haven't covered?
Email a real human — we'll come back the same working day.