Privacy policy
Draft — to be reviewed by a lawyer before launch.
GoRestyle (“we”) builds and hosts websites for businesses. This policy explains what personal data we process.
What we collect
- Account data: name, email, password (stored only as a secure hash).
- Website content you give us or that is publicly available on your current website.
- Payment data is handled by Stripe; we never see your card number.
- Basic technical logs for security.
- Messages visitors send through the forms on your website: we store them in your website's enquiries inbox and email them to you, acting on your behalf (as your data processor), and delete them when you delete them or your website.
Direct marketing
We may contact businesses at their general business contact details with an offer for a new website (B2B, opt-out). Every message contains an easy way to unsubscribe, and we stop immediately when asked. We do not send marketing to private persons without consent. To measure how useful our messages are, they contain a small image and links that tell us whether an email was opened and whether a link was clicked; replies arrive in our mailbox and are linked to your business in our records. Reply “No” and we stop.
Partner links
If you arrive through a partner's link, a small cookie ("gr_ref") remembers that partner's code for 60 days, so they can be credited if you create an account and buy a website. It contains no personal data. Partners see only totals (visits, sign-ups, sales) — never who you are.
Emails to customers
If you start a website and don't finish it, we may send up to two reminders; after a delivery we may ask once for a review. Every such email has an unsubscribe link. Emails about payments and invoices are always sent.
Facebook and Instagram import
If you choose “Import from Facebook” or “Import from Instagram” in the editor, you log in with Facebook or Instagram and give us read-only access to the page or account you choose. We read only what you then select — photos, profile picture, phone, email, address, opening hours and the page link — and copy it into your website project. We never post, comment or message on your behalf. The access token is kept only in our server's memory for at most 30 minutes and is discarded right after the import; we don't store it, and we don't use the data for anything else or share it with anyone.
Deleting this data: imported photos and details are part of your website project — remove them in the editor at any time, or delete the project. To have everything deleted, write to info@gorestyle.com with the subject “Delete my data” — we delete it within 30 days and confirm by email. You can also remove our access in Facebook (Settings → Apps and websites) or Instagram (Settings → Website permissions → Apps and websites).
How long we keep data
Website projects are deleted from our server 14 days after you download or upload the finished website. Previews that are never taken further are deleted on request or when no longer needed. Your account stays until you ask us to delete it.
Your rights
You can ask for a copy of your data, its correction or deletion at any time — write to info@gorestyle.com. You may also complain to the State Data Protection Inspectorate (Lithuania).
Processors
Hosting of websites and demo links (our own server, rented from Hostinger), sending emails (Hostinger), payments (Stripe), AI text and image processing (Anthropic), Meta (only when you use the Facebook / Instagram import), translation services — only as needed to provide the service.