Website service terms

Version 2026-11-09.2

These terms are between Jake Manfield, trading as Streetward ("we", contact hello.lanesite@gmail.com) and the business approving a website ("you"). This service is for businesses only. Our postal address for formal notices is available on request by email.

1. The preview

We build a private preview from the details you provide, free of charge and with no obligation. It includes up to two rounds of changes. Nothing is payable unless you approve the site.

2. Approval and payment

When you click "Approve" and accept these terms, you're asking us to put the site live on the plan you chose. You pay by card through Stripe; we never see your card details. We're not VAT-registered, so no VAT is added.

• Monthly plan: £0 setup, then £39 a month charged on the same date each month, starting on approval. Minimum term 3 months.
• Own-it plan: £249 build fee plus the first month's £19 hosting and care, so £268 on approval, then £19 a month.
• Premium: as quoted in writing.

Payment is only confirmed when Stripe tells us it has succeeded. We'll email you when that happens. A "thank you" page alone isn't confirmation.

3. What the monthly fee covers

Hosting, security updates, backups, online booking with your own dashboard, and up to 30 minutes of small edits a month (prices, hours, text, photos). Unused time doesn't roll over. Larger changes are quoted first and only done once you agree.

3a. Online booking and your dashboard

Every plan includes online booking on your website and a private dashboard where you and your team manage bookings, the calendar, services, staff hours, time off and your client list. You can also add bookings yourself, for example phone or walk-in customers.

You're responsible for the services, prices and hours you set, for honouring bookings your customers make, and for keeping your dashboard login private. Booking emails and text reminders aren't currently included; we'll tell you in writing if that changes. If you'd rather keep a booking system you already use, we can link your book button to it instead.

4. Your content

You confirm you own or have permission to use any text, logos and photos you send us, and that business claims (such as accreditations) are accurate. We don't publish reviews or testimonials unless they are real and you can show where they came from.

5. Domain and ownership

We register your domain in your business's name, or use the one you already own. You pay its renewal (typically £10–£15 a year), at cost.

Own-it plan: the site's design and content become yours once the build fee is paid. When you leave, we send you a full copy of the site files, which you can keep and use however you like. The design tools and building blocks we use to make sites stay ours.

Monthly plan: you're renting the website. Its design and files stay ours, and it comes down when the plan ends. Your domain, the text, logos and photos you gave us, and your customer data stay yours.

The online booking system and dashboard are a service, not part of your website files. When you leave, we export your client and booking data to you (CSV), and your book button will need linking to another booking system.

6. Cancelling

To cancel, email us. Monthly plan: you can give notice at any time, and it ends 30 days after your notice or at the end of the 3-month minimum, whichever is later. Own-it plan: cancel the care plan with 30 days' notice. Hosting stops when the plan ends. On the Own-it plan we'll send your site files first.

If a monthly payment fails, Stripe will retry. If it's still unpaid after 14 days, we may take the site offline until it's paid.

7. Refunds

If we can't put your approved site live within 10 working days of payment for reasons within our control, we'll refund the build fee and any monthly fees paid in full. Monthly fees aren't refunded for part-months once the site is live. Nothing in these terms affects rights you can't lawfully give up.

8. Our responsibility

We take reasonable care to keep your site online and secure. Our total liability is limited to the fees you paid in the previous 12 months. We're not liable for indirect losses such as lost profits.

9. Changes

We'll give 30 days' notice of any price change, and you can cancel before it takes effect.

10. Data

When your customers book through your site, you are the controller of their details (such as name, phone, email and booking history) and we process them on your behalf. The same applies to your staff's details. We only use that data to run your website and booking system, on your instructions. The full terms for that processing are in Schedule 1 below, which forms part of these terms. How we handle your own details as our customer is explained in our privacy notice.

Schedule 1: Processing your customers' personal data

This Schedule forms part of our terms and is the contract required by Article 28(3) UK GDPR. In it, "you" are the business (the controller) and "we" are Jake Manfield, trading as Streetward (the processor).

1. Details of the processing

2. Your obligations

You decide why customer data is collected and must have a lawful basis for it. You must give your customers your own privacy information, and you're responsible for the instructions you give us.

3. Instructions

We process the data only on your documented instructions. Those are these terms, the settings you choose in your dashboard, and your written requests by email. That includes any transfer of the data outside the UK. The only exception is where the law requires otherwise, and then we'll tell you first unless the law forbids it. If we think an instruction breaks UK data protection law, we'll tell you immediately.

4. Confidentiality

The only person with access to the data is Jake Manfield, who is bound by confidentiality. If anyone else is ever given access, they'll be bound by confidentiality first.

5. Security (Article 32)

These are the measures currently in place:

• encrypted connections (HTTPS) to your website, booking pages and dashboard
• passwords stored only as salted hashes (scrypt); account lock-out after repeated failed logins; protection against cross-site request forgery
• database rules that separate each business's data from every other business's
• staff roles (owner, manager, staff) that limit what each login can do
• server access by SSH key only (password login disabled); a firewall allowing only web and SSH traffic; automatic security updates; blocking of repeated failed login attempts
• daily backups, kept for 14 days on the server, with encrypted copies transferred periodically to equipment we control in the UK
• automatic anonymisation of customers with no bookings in the retention period you set

We'll review these measures as the service changes. We won't reduce the overall level of security without telling you.

6. Sub-processors

• You give general authorisation for us to use sub-processors. The current one is Hetzner Online GmbH (server hosting; data stored in Falkenstein, Germany).
• We'll tell you by email at least 14 days before adding or replacing a sub-processor. You can object. If we can't resolve your objection, you can end your plan without penalty before the change takes effect.
• We'll put data protection terms in place with every sub-processor that give the protections Article 28(3) requires, and we remain responsible to you for their performance.
• We don't currently send booking emails or text messages, so no email or SMS provider receives your customers' data.

7. International transfers

The data is stored in Germany, which the UK treats as giving adequate protection. Encrypted backup copies are held in the UK. We won't transfer the data anywhere else without your written instruction and the safeguards the law requires.

8. Helping you with your customers' rights

Your dashboard lets you view, correct, export (one customer at a time) and erase a customer's details. Where you need more, we'll help on request, taking into account what we can reasonably do.

9. Helping you with your obligations

• Breaches: we'll tell you without undue delay after becoming aware of a personal data breach affecting your data, with the information we have at the time. We'll update you as we learn more.
• We'll also give you reasonable help with security, breach notifications to the ICO or to individuals, data protection impact assessments and consultation with the ICO, based on the information available to us.

10. End of the service

• When your plan ends, you can ask us within 30 days for a copy of your customer and booking data. We'll send it as CSV files; we produce this export by hand.
• After that, or sooner if you ask, we'll delete the data from the live system.
• Copies in backups are then deleted as those backups expire, which is within 14 days on the server. Encrypted copies held in the UK are deleted within 90 days.
• The only exception is where the law requires us to keep data.

11. Information and audits

We'll give you the information reasonably needed to show that we meet this Schedule, and we'll answer reasonable written audit questions. Inspections, by you or an auditor you appoint, are by prior agreement, at a reasonable time and at your cost.

12. No other use

We don't use your customers' data for our own purposes. We don't sell it, share it except as described here, or market to your customers.