Privacy policy

Who we are

Preeny is operated by Gregory Preen, based in Spain. Gregory Preen is the data controller responsible for the personal information described in this policy. You can contact us about privacy or your information at [email protected].

This policy covers visitors to preeny.com, sneak peek requests, enquiries and our communications with prospective and existing customers. Where we process information on behalf of a customer through their own website, the customer’s privacy notice and our agreed processing arrangements also apply.

Information we collect

When you request a sneak peek, we collect the website address or business name you submit, your name, email address, optional WhatsApp number and any design ideas or functional requirements you choose to provide. Contact enquiries include your name, email address, optional telephone number and message. We also keep relevant emails, WhatsApp messages, project communications and enquiry status information.

We may review publicly accessible information on the website you provide, such as business services, branding, images and contact information, to understand your business and prepare a preview. This can include personal information where, for example, a website identifies a sole trader or team member.

Our hosting service processes technical information needed to serve and protect the website, including IP addresses, requested pages, browser information and access times. Our form protection stores a short-lived hashed identifier derived from a network address; it does not store the raw IP address in the enquiry database.

Please do not include passwords, payment-card details, health information or other sensitive personal information in the enquiry forms. Only share another person’s information if you are entitled to do so.

How the sneak peek form works

Each step is saved when you submit that step; you do not need to finish the whole form for us to receive the information you have already submitted. If you complete the final step, the enquiry is emailed to us immediately. If you stop partway through, the submitted information is emailed to us after approximately 30 minutes without another submitted step. Completing it later can produce a completion update.

We use this information to understand your request, prepare your preview and contact you about it. A WhatsApp number is optional, and we can send your preview by email instead. We do not receive text merely because you type it into a form without submitting the relevant step.

Why we use your information and our legal bases

Enquiries, previews and providing our service: we use business and contact information to respond, discuss requirements, prepare requested previews, agree work and manage websites. Where you request steps towards a contract with us, or are our customer, the basis is taking steps at your request before a contract or performing that contract (Article 6(1)(b) GDPR).

Business contacts and administration: where you act for another business, or make a general enquiry, we rely on our legitimate interests in responding to relevant enquiries, communicating with business contacts and organising our work (Article 6(1)(f)).

Website operation and security: we rely on legitimate interests in operating a reliable website, preventing misuse, resolving technical problems and protecting enquiries. We limit this processing to what is necessary and consider its effect on your rights.

Legal obligations and disputes: where necessary, we keep information to meet applicable legal obligations (Article 6(1)(c)), or to establish, exercise or defend legal claims under our legitimate interests.

We do not add people to a marketing mailing list simply because they enquire. If we introduce optional marketing requiring consent, we will ask separately and explain how to withdraw it. You do not have to agree to unrelated marketing to request a preview.

Information you need to provide

Your name and a valid email address are needed for us to respond to a contact enquiry or deliver a sneak peek. The sneak peek also needs a website address or, if you do not have a website, your business name. Your telephone or WhatsApp number and design notes are optional. Without the relevant required details, we may be unable to prepare or deliver what you have requested.

Who receives your information

Access is limited to the people and service providers who need information for the purposes described here. Our current services include:

SiteGround: hosting the website and enquiry database, technical security, backups and sending form notifications.

Google Workspace, including Gmail and Google Sheets: receiving and managing correspondence and organising enquiries and project information.

WhatsApp: communicating about previews, services and website updates when you choose this channel or provide your number for that purpose. We currently use the ordinary WhatsApp service. WhatsApp also handles account, connection and usage information under its own privacy policy. Email is available as an alternative.

AI-assisted design and development services: as explained below, providers used to help prepare previews and websites, including OpenAI’s Codex.

We may also disclose relevant information to professional advisers or public authorities where necessary for advice, legal obligations or legal claims. We do not sell your personal information.

AI-assisted design and development

We use AI tools to help create sneak peeks, website content, designs and functionality. The tools can vary with the work; an example is OpenAI’s Codex. Inputs are limited to publicly accessible business website content and information about the design or functionality you want.

We do not include the name, email address or telephone number you submit as contact details in AI briefs. Public website content and free-text design instructions can nevertheless contain personal information, so we limit the information shared to what is needed and avoid unnecessary personal or sensitive details. Please keep design instructions focused on your business requirements.

Providers process submitted content according to the particular service, account settings and terms. We do not promise that all AI tools have identical retention or model-training settings. OpenAI explains its handling of information in its Europe privacy policy, with separate agreements applying to its business offerings. You can ask us which providers were used for your project.

We do not use automated decision-making or profiling to make decisions about you that produce legal or similarly significant effects. AI assistance is used for producing website work.

International processing

Preeny operates from Spain. Providers such as Google, WhatsApp and OpenAI operate internationally, and their services can involve processing outside the European Economic Area, including in the United States. Hosting backups and support can also involve locations different from the main website server. We do not promise that all information remains in Spain or the EEA.

Where a transfer of personal information requires safeguards, the relevant arrangements must provide protection under applicable data protection law, such as an applicable European Commission adequacy decision or approved standard contractual clauses. The mechanism depends on the provider and service used. You can request information about the destinations and safeguards relevant to your enquiry at [email protected]. Google describes its arrangements in its data transfer information; WhatsApp and OpenAI explain theirs in the privacy policies linked above.

How long we keep information

Website form records: normally deleted from the active enquiry database 90 days after the last submitted update. A request awaiting successful delivery or resolution may need to remain until it has been dealt with.

Enquiry emails, Google Sheets records and WhatsApp conversations: for enquiries that do not become customers, we keep relevant records for up to 24 months after the last meaningful contact, then delete or anonymise information no longer needed. These records are reviewed and managed separately from the website database.

Customer records: we keep information needed to provide the service while the customer relationship continues. Afterwards, relevant records may be retained for applicable accounting, tax, contractual or legal-claims periods. Retention depends on the type of record, the legal obligation and any unresolved matter; it is not an indefinite right to keep all project information.

Security and backups: form rate-limit identifiers normally expire after about two hours. Technical logs and backups follow the hosting provider’s operational retention cycles. Deleted information may remain in restricted backups until those backups are replaced; it is not used for routine business purposes. Where the law requires information to be preserved or restricted for a claim or legal obligation, we keep only what is necessary for that purpose.

Cookies and browser preferences

We do not currently use analytics or advertising cookies, advertising pixels or embedded third-party tracking on this website. Fonts are hosted locally.

If you choose a light or dark theme, the site saves that preference in your browser’s local storage under preeny-theme. It is an appearance preference, not an enquiry record. You can remove it using your browser’s site-data settings. Form details are held in the open page’s memory and are not saved in browser local storage. Closing or refreshing the page can clear the visible form, but does not remove steps already submitted to us.

Keeping information secure

We use HTTPS for form submissions and limit access to enquiry records and service accounts. Database access details and scheduled delivery scripts are kept outside the public website folder. Hosting security and backups help protect against loss and misuse. No internet service can guarantee absolute security; please contact us if you believe information has been exposed or sent incorrectly.

Your rights

Subject to the applicable conditions and exemptions, you can ask to access your personal information, correct inaccurate or incomplete information, erase information, restrict its use, receive information in a portable format or object to processing based on legitimate interests. You can withdraw consent at any time where we rely on consent, without affecting earlier lawful processing. You can always object to direct marketing.

To make a request, email [email protected]. We may need proportionate information to confirm your identity. We normally respond within one month; if a permitted extension is needed for a complex request, we will explain why. Requests are normally free of charge. Some records may need to be retained to meet a legal obligation or deal with a legal claim.

Questions and complaints

Please contact [email protected] with privacy questions or concerns. You also have the right to complain to a supervisory authority without contacting us first.

As Preeny is based in Spain, the relevant authority is the Agencia Española de Protección de Datos (AEPD). You may also contact the authority in the EEA country where you live or work, or where you believe an infringement occurred. Where UK data protection law applies, you can contact the Information Commissioner’s Office (ICO).

Changes to this policy

We will update this policy when our services or handling of personal information change. The date shown at the start identifies the latest version. Where necessary, we will bring significant changes to your attention before using information for a new purpose.