Privacy Policy

Last updated: May 2026

1. Who we are

PayWillie.co.uk is operated by William Gourley, based in the United Kingdom. William is the sole data controller for this Site. If you have any questions about how your data is handled, you can contact William at [email protected].

2. What information we collect

We collect only the information necessary to operate the Site and process payments. This may include:

  • Account information — your name, email address, and password (hashed) when you register
  • Payment information — payment amounts and invoice references; card details are handled entirely by PayPal or Stripe and are never stored on this server
  • Communication — any messages you send to Willie directly via email
  • Technical data — IP address, browser type, and access logs collected automatically by the server and Cloudflare for security purposes

3. How we use your information

We use your information solely to:

  • Create and manage your account on the Site
  • Process payments and issue invoices
  • Send you payment confirmations and invoice notifications by email
  • Respond to your enquiries
  • Maintain the security and proper functioning of the Site

4. Legal basis for processing

Under UK GDPR, we process your data on the following bases:

  • Contract — to fulfil our obligations when you make a payment or request an invoice
  • Legitimate interests — to maintain the security of the Site and prevent fraud
  • Consent — where you have voluntarily provided your information to register or make contact

5. Sharing your information

We do not sell or share your personal data with third parties for marketing purposes. Your data may be shared only with:

  • PayPal — to process payments made via PayPal. PayPal's own privacy policy applies.
  • Stripe — to process card payments made via Stripe. Stripe's own privacy policy applies.
  • Your bank — if you pay by direct bank transfer, your bank processes that transaction independently.
  • Cloudflare — which handles DNS, CDN, and security for the Site. Cloudflare may process your IP address and request data as part of its service.

No other third parties receive your personal data.

6. Data storage and security

Your data is stored in a MySQL database on a VPS (Virtual Private Server) hosted in the Netherlands. The server is managed with restricted access and is protected by Cloudflare. HTTPS encryption is enforced on all connections to the Site.

While we take reasonable steps to protect your data, no system is entirely immune to risk. If you have concerns about the security of your account, please contact us immediately.

7. How long we keep your data

Account and payment records are retained for as long as your account is active and for a reasonable period thereafter for record-keeping purposes (typically up to 6 years, in line with UK financial record requirements). Technical logs are retained for a shorter period for security purposes. You may request deletion of your account and personal data at any time (see Your Rights below).

8. Cookies

The Site uses only essential cookies required for it to function — specifically, a session cookie to keep you logged in. No tracking, advertising, or analytics cookies are used.

Cloudflare may set its own cookies for security and performance purposes. These are covered by Cloudflare's privacy policy.

9. Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your personal data (subject to legal retention requirements)
  • Restriction — ask us to limit how we process your data in certain circumstances
  • Portability — receive your data in a structured, commonly used format
  • Objection — object to processing based on legitimate interests

To exercise any of these rights, please contact William at [email protected]. We will respond within 30 days.

10. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection authority — at ico.org.uk or by calling 0303 123 1113.

11. Changes to this policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

© 2026
Top