Privacy Policy
Last updated: 01/07/2026
Candl respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, become a client, complete an onboarding form, or use our managed website services.
Candl is a UK managed website service for trades businesses.
For the purpose of this Privacy Policy:
Candl means Candl, operating through getcandl.co.uk.
Website means getcandl.co.uk.
We, us and our refer to Candl.
You refers to website visitors, leads, clients and prospective clients.
If you have any questions about this Privacy Policy, contact us at:
Email: hello@getcandl.co.uk
1. Who we are
Candl provides managed websites, lead-focused website builds, simple automation and related website support for trades businesses.
For data protection purposes, Candl is the data controller for the personal information we collect through our own website, enquiries, onboarding forms and client communications.
Business name: Candl
Website: getcandl.co.uk
Email: hello@getcandl.co.uk
2. Personal data we collect
We may collect and use the following types of personal information:
Enquiry information
When you contact us through our website, email, phone, social media or other communication channels, we may collect:
your name
business name
email address
phone number
website URL
business location
message or enquiry details
service interests
any other information you choose to send us
Client onboarding information
When you become a client or complete an onboarding form, we may collect:
your name
business name
trading details
business email address
phone number
business address or service area
logo, brand assets, images and written content you provide
website requirements
package selection
add-on selections
domain and email setup information
information needed to build and manage your website
Payment and billing information
We may collect limited payment-related information, such as:
package purchased
payment status
billing email
subscription status
invoice or receipt details
Payments are processed through third-party payment providers such as Stripe. We do not store full card details on our own systems.
Website usage information
When you visit our website, we may collect basic technical and usage information, such as:
IP address
browser type
device type
pages visited
approximate location
referral source
time spent on pages
interactions with forms, buttons or embedded tools
This may be collected through website analytics, hosting tools, cookies or similar technologies.
3. How we collect personal data
We may collect personal data when you:
visit our website
fill in a contact form
request a quote
book a call
email us
call or message us
complete an onboarding form
purchase a package or add-on
use one of our managed services
interact with embedded tools, such as booking forms, payment links, chatbots or analytics tools
4. How we use your personal data
We use personal data to:
respond to enquiries
provide quotes and package recommendations
book calls or consultations
set up and deliver managed website services
build, maintain and support client websites
manage onboarding and project delivery
process payments and subscriptions
send service updates and client communications
provide support after launch
manage domains, email setup and website tools
improve our website and services
prevent misuse, spam or security issues
keep business, tax and accounting records
comply with legal obligations
5. Our lawful bases for using personal data
We only use personal data where we have a lawful basis to do so.
Depending on the situation, we may rely on:
Contract
We use your information where it is needed to provide our services, manage your package, process onboarding, build your website, handle support or manage your subscription.
Legitimate interests
We may use your information where it is necessary for our legitimate business interests, such as responding to enquiries, improving our services, keeping records, managing client relationships and protecting our website from misuse.
Legal obligation
We may use and keep certain information where required for legal, tax, accounting, regulatory or compliance purposes.
Consent
Where required, we may ask for your consent, for example for certain marketing communications or non-essential cookies.
6. Marketing communications
We may contact you with service-related updates if you are a client or have enquired about our services.
We will only send marketing communications where we have a lawful basis to do so. You can opt out of marketing emails at any time by contacting us at:
We do not sell your personal data to third parties.
7. Who we share personal data with
We may share personal data with trusted third-party service providers where needed to run Candl and provide our services.
These may include:
website hosting providers, such as Hostinger
payment providers, such as Stripe
email and business email providers
form and onboarding tools
booking tools, such as Calendly or similar
analytics and visitor insight tools
automation tools, such as Zapier or Google Sheets
chatbot tools, such as DocsBot or similar
video or screen-recording tools, such as Loom
accounting, tax or administrative tools
professional advisers, where necessary
legal or regulatory authorities, where required
We only share personal data where necessary and expect third-party providers to handle personal data securely and lawfully.
8. Client website data
Candl may help clients set up website forms, lead capture tools, booking tools, email automation, payment links, chatbots, analytics or similar website features.
Where we manage tools on behalf of a client, we may process personal data as part of providing the service. This may include enquiries submitted through the client’s website.
Clients are responsible for ensuring their own business uses customer data lawfully. Candl is not responsible for how a client uses customer information after it has been received by the client.
9. Cookies and tracking technologies
Our website may use cookies or similar technologies to help the site work properly, understand website performance, improve user experience and support enquiry tracking.
Cookies may include:
essential cookies needed for the website to function
analytics cookies
embedded service cookies
booking or payment tool cookies
chatbot or visitor insight cookies
Where required, we will ask for consent before using non-essential cookies.
For more detail, please see our Cookie Policy.
UK cookie rules require organisations to tell users about cookies, explain what they do and why, and get consent for cookies unless an exemption applies.
10. International transfers
Some of the third-party tools we use may process or store personal data outside the UK.
Where this happens, we expect those providers to use appropriate safeguards to protect personal data in line with applicable data protection laws.
11. How long we keep personal data
We only keep personal data for as long as necessary.
As a general guide:
enquiry information may be kept for up to 24 months
client account and project information may be kept for the duration of the client relationship and for a reasonable period afterwards
payment, invoice and accounting records may be kept for up to 6 years where needed for tax, accounting or legal purposes
website form submissions may be kept for as long as needed to respond to the enquiry and manage the service
marketing preferences may be kept until you unsubscribe or ask us to remove them
We may keep information for longer where required for legal, regulatory, tax, accounting, dispute or security reasons.
12. How we protect personal data
We take reasonable steps to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
This may include:
using secure third-party platforms
limiting access to personal data
using password-protected systems
using trusted hosting and payment providers
keeping systems and website tools reasonably maintained
avoiding unnecessary collection of personal data
No online system can be guaranteed to be completely secure, but we aim to use appropriate measures to protect the information we handle.
13. Your data protection rights
Depending on the circumstances, you may have rights to:
access the personal data we hold about you
ask us to correct inaccurate information
ask us to delete your information
ask us to restrict how we use your information
object to how we use your information
withdraw consent where we rely on consent
ask for your data to be transferred where applicable
complain to the Information Commissioner’s Office
To exercise your rights, contact us at:
The UK’s data protection framework is governed by the UK GDPR and the Data Protection Act 2018.
14. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.
You can contact us at:
You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.
15. Links to other websites
Our website may contain links to third-party websites, tools or platforms, such as Stripe, Calendly, Hostinger, chatbot tools or social media platforms.
We are not responsible for the privacy practices of third-party websites. You should read their privacy policies before providing personal data to them.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on this page, with the “Last updated” date shown at the top.
Contact
Phone
hello@getcandl.co.uk
0754 2239 300
© 2026. All rights reserved.