Privacy Policy
Effective Date: October 2026
Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information when you visit this website (the "Site") and when you use Site Stewards services. By using this Site or engaging our services, you agree to the terms of this Privacy Policy.
1. Information We Collect
When you visit our Site:
- We may collect personal information you voluntarily provide — such as your name, email address, phone number, or website URL — when you contact us, book a consultation, or request our services.
- We automatically collect non-personal information through analytics tools to understand how visitors use the Site and to improve our services.
When you use Site Stewards services:
- We access your WordPress dashboard to provide maintenance, security monitoring, and backups on your behalf.
- We do NOT collect or store your website files, backups, or sensitive business data. All backups are stored securely in a private, encrypted vault that you own and control.
- We may collect limited technical data (plugin versions, update logs, security scan results) necessary to provide our services, but this data remains associated with your site.
2. How We Use Your Information
We use collected information to:
- Respond to your inquiries and provide customer support
- Schedule and conduct consultations or service delivery
- Perform WordPress maintenance, security monitoring, and backups on your behalf
- Send service updates or important notifications related to your site (if you've opted in)
- Improve the functionality and security of our Site and services
- Comply with legal obligations
We never sell, rent, or share your personal information with third parties.
3. Your Data Ownership
This is critical: You own 100% of your website files, backups, and data.
- Site Stewards acts as a service provider with temporary access to your WordPress dashboard.
- All backups are stored securely in a private, encrypted vault under your ownership and control.
- You can revoke Site Stewards' access to your WordPress dashboard at any time by deleting the admin account we use.
- You may export or download your website and backups at any time through your backup dashboard.
4. Lawful Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and using your personal information depends on the context:
- Consent – when you have given clear consent (for example, booking a consultation or signing up for updates).
- Contract – when processing is necessary to perform our service agreement with you.
- Legal Obligation – when processing is required to comply with applicable law.
- Legitimate Interest – when processing is necessary for our legitimate business interests (security, fraud prevention, service improvement), and your rights do not override those interests.
5. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies to operate effectively, remember preferences, and analyze traffic. We use analytics tools to understand how visitors use the Site.
- When you first visit the Site, you will see a cookie consent notice.
- You can disable cookies in your browser settings, but some parts of the Site may not function properly.
6. Data Security
We take reasonable measures to protect your personal information:
- Your WordPress admin account credentials are encrypted and stored securely.
- We use WordPress security tools to monitor and protect your site.
- All backups are encrypted and stored in a secure, private vault with industry-standard encryption.
- We maintain professional liability insurance to protect our clients.
No online platform is completely secure, and we cannot guarantee absolute security. However, we are committed to industry-standard security practices.
7. Third-Party Services
Our services rely on trusted third-party platforms:
- Your hosting provider (GoDaddy, Bluehost, DreamHost, WP Engine, Kinsta, etc.) – their privacy policies apply to your hosting relationship.
- WordPress.org – the open-source platform your site runs on.
- Backup and monitoring platforms – for secure storage and continuous site protection.
We are not responsible for third-party data practices. We recommend reviewing their privacy policies.
8. Your Rights (GDPR & General)
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Withdraw consent or object to certain uses of your data
- Request data portability
- Revoke Site Stewards' access to your WordPress dashboard at any time
To exercise these rights or if you have concerns, please contact us at: hello@sitestewards.com
9. Data Retention
We retain personal information only as long as necessary to provide our services or as required by law:
- Communication records (emails, consultation notes) are kept for the duration of our service relationship and a reasonable period afterward for record-keeping.
- Technical service data (backup logs, security scan results) are retained as long as you are a Site Stewards client.
- Once you cancel our services, we delete associated data within 30 days, except where required by law.
Your WordPress backups in your secure vault remain under YOUR ownership and control indefinitely.
10. Children's Privacy
This Site and our services are not directed toward children under the age of 13, and we do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised "Effective Date." Continued use of the Site or our services after any changes indicates acceptance of the updated policy.