Skip to content
refitted.dev
LEGAL

Privacy Policy

Last updated: 16 July 2026

Who we are

Refitted (“we”, “us”) operates refitted.dev, a service that builds custom websites, web apps, automated spreadsheets, AI tools, and automation for businesses. For any privacy question or request, contact us via the contact form or by replying to any email we have sent you.

What we collect and why

Contact form. When you submit the contact form we collect your name, email address, the service you selected, and your message (plus the product or plan you were viewing, if you arrived from one). We use this solely to respond to your request and prepare a quote. Legal basis: taking steps at your request prior to entering a contract (GDPR Art. 6(1)(b)).

Purchases. Payments are processed by Stripe. We never see or store your card details. Stripe shares with us your email address and the order details so we can deliver what you bought. Legal basis: performance of a contract (GDPR Art. 6(1)(b)). See Stripe's privacy policy.

Analytics. We use Vercel Analytics, a cookie-free, privacy-friendly analytics service that does not track you across sites and does not store identifying information. Legal basis: legitimate interest in understanding aggregate site usage (GDPR Art. 6(1)(f)).

What we don't do

  • We don't sell or share your data with third parties for marketing.
  • We don't use advertising or cross-site tracking cookies.
  • We don't send marketing email unless you explicitly ask for it.

Retention

Contact-form emails are kept for as long as needed to handle your request and any resulting project, then deleted. Order records are kept as long as required by tax and accounting law.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. You can also lodge a complaint with your local supervisory authority. To exercise any right, use the contact form.

Processors

We use Vercel (hosting and analytics), Stripe (payments), and our email provider (receiving and answering your messages). Each processes data only on our instructions.