Privacy Policy
This policy covers championwebmasters.com and the client dashboard behind it. It explains what we collect, why, who else touches it, and how to get it removed. If anything here is unclear, email info@championwebmasters.com and we will answer in plain language.
Who we are
Champion Webmasters (legal entity name, registered address) is the controller of the personal information described below.
What we collect
Information you give us
- Account details. Your email address and a password when you create an account. Passwords are hashed by our authentication provider — we never see or store the plain text.
- Project information. Whatever you send us to build your site: business details, copy, images, logos, and the contents of any brief or form.
- Correspondence. Emails and messages you send us, and our replies.
Information we receive about payments
Payments run through Stripe on Stripe's own checkout and billing pages. Card numbers never reach our servers. What we store is the subscription state Stripe reports back: which plan you are on, whether it is active, past due or cancelled, when the current period ends, your Stripe customer and subscription identifiers, and invoice records including amounts, dates and links to Stripe-hosted receipts.
Information collected automatically
- Session cookies. Set when you sign in, so the dashboard knows it is you. These are strictly necessary — without them you cannot stay signed in.
- Analytics. If analytics is enabled on the site, Google Analytics 4 records page views, approximate location derived from IP address, device and browser type, and how you arrived. This is aggregate traffic measurement, not profiling of individuals.
- Server logs. Our host records standard request data, including IP addresses, for security and debugging.
Why we use it
- To create and secure your account, and to let you sign in.
- To design, build, host and maintain your website.
- To take payment, issue invoices, and manage your subscription.
- To reply to you and send service messages about your project or billing.
- To understand which pages are useful and improve the site.
- To meet tax, accounting and other legal obligations.
We do not sell your personal information, and we do not share it with advertisers. We will not send you marketing email you did not ask for.
Who we share it with
We use a small number of service providers who process data on our behalf, under contract, and only for the purposes above:
- Stripe — payment processing, subscriptions and invoicing.
- Supabase — authentication and the database holding your account, project and invoice records.
- Vercel — hosting and content delivery for the site.
- Google Analytics — traffic measurement, where enabled.
We may also disclose information where the law requires it, or to establish or defend legal claims. If the business is ever sold or merged, account records would transfer with it, and we would tell you first.
Cookies
Strictly necessary cookies keep you signed in and cannot be switched off without breaking the dashboard. Analytics cookies are optional; you can block them in your browser settings or with a browser extension, and the site will work normally without them.
How long we keep it
- Account and project data — for as long as your account is open, and for a reasonable period afterwards in case you come back.
- Invoices and payment records — for as long as tax and accounting rules require, typically 7 years — confirm with your accountant.
- Analytics — according to the retention period configured in Google Analytics.
Your rights
You can ask us to show you the personal information we hold about you, correct anything wrong, delete it, or send you a copy in a portable format. You can also object to how we use it. Email info@championwebmasters.com and we will respond within the timeframe the applicable law allows.
If you are in California, the CCPA gives you rights to know, delete, correct and opt out of sale — we do not sell personal information — and not to be discriminated against for exercising them. If you are in the UK or EU, you have equivalent rights under the UK GDPR and GDPR, including the right to complain to your data protection authority.
Security
Data is encrypted in transit. Database access is restricted by row-level security so one client cannot read another's records, and the keys that bypass those rules are held server-side only. No system is perfectly secure, but we take this seriously and will tell you promptly if a breach affects your data.
Children
This is a service for businesses. It is not directed at children under 13, and we do not knowingly collect their information.
International transfers
Our providers may process data in the United States and elsewhere. Where information moves out of the UK or EEA, our providers rely on approved safeguards such as Standard Contractual Clauses.
Changes
If we change this policy we will update the date at the top. If a change materially affects how we handle your information, we will email account holders.
Contact
Questions, requests or complaints: info@championwebmasters.com.