Privacy Policy
Your privacy matters to us. This policy explains how The Demo Site collects, uses, and protects your personal data in compliance with UK data protection law and the General Data Protection Regulation (GDPR).
Last updated: 31 August 2026
1. Who We Are
The Demo Site ("we", "us", "our") is a UK-based website directory and guest post platform. We operate the website at thedemosite.com and provide services including directory listings, guest post publication, and business profile pages.
We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, please contact us at privacy@thedemosite.com.
2. Information We Collect
We collect the following categories of personal data when you create an account, submit a guest post, make a purchase, or interact with our website:
- Full name
- Email address
- Password (stored securely using industry-standard hashing)
- Website URL(s)
- Business name and description
- Guest post article content
- Category and niche information
- Billing name and address
- Payment card details (processed securely by Hercules Commerce — we never store full card numbers)
- Transaction history and purchase records
- IP address
- Browser type and version
- Operating system
- Referring URL and pages visited
- Date and time of access
3. How We Use Your Data
Providing Our Services
To operate the website directory and guest post platform, process submissions, publish content, manage your account, and maintain your business profile pages.
Communications
To send submission status updates, payment confirmations, service announcements, and respond to your enquiries. We will not send marketing emails without your explicit consent.
Payment Processing
To process payments securely through Hercules Commerce, issue receipts, manage refund requests, and maintain financial records as required by law.
Security & Fraud Prevention
To protect against unauthorised access, detect suspicious activity, prevent fraud, and ensure the integrity of our platform.
Analytics & Improvement
To understand how visitors use our site, identify technical issues, improve user experience, and develop new features and services.
4. Lawful Basis for Processing
We process your personal data on the following legal grounds:
- Contract performance: Processing necessary to fulfil your guest post order, manage your account, and provide directory services.
- Legitimate interests: Analytics, fraud prevention, and service improvement where our interests do not override your rights.
- Consent: Marketing communications and non-essential cookies, which you can withdraw at any time.
- Legal obligation: Retaining financial records and transaction data as required by UK tax and accounting regulations.
5. Cookies
We use cookies and similar tracking technologies to enhance your experience. Below is a summary of the cookies we use:
| Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the website to function. These handle authentication sessions, security tokens, and basic site functionality. Cannot be disabled. | Session / up to 30 days |
| Analytics Cookies | Help us understand how visitors interact with the site by collecting anonymous usage data such as page views, time on site, and navigation paths. | Up to 12 months |
| Preference Cookies | Remember your settings and preferences such as language selection, theme choice, and display options to provide a more personalised experience. | Up to 12 months |
You can manage cookie preferences through your browser settings. Disabling essential cookies may impair site functionality.
6. Third-Party Services
We share personal data with the following trusted third-party service providers, solely for the purposes described in this policy:
Hercules Commerce (Payment Processing)
We use Hercules Commerce to securely process all payments. When you make a purchase, your payment card details are transmitted directly to Hercules Commerce and are never stored on our servers. Hercules Commerce is PCI-DSS compliant and processes data in accordance with applicable data protection laws.
Hosting & Infrastructure
Our website is hosted on secure cloud infrastructure. Data may be processed and stored on servers located in the UK, EEA, or other jurisdictions with adequate data protection. We ensure all providers offer appropriate safeguards as required by the GDPR.
We do not sell, rent, or trade your personal data to any third parties for marketing purposes.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:
- Account data: Retained for the duration of your account and for up to 12 months after account deletion.
- Transaction records: Retained for 7 years to comply with UK tax and accounting regulations (HMRC requirements).
- Published content: Guest posts and directory listings remain live indefinitely as part of the public directory. You may request removal at any time.
- Analytics data: Aggregated and anonymised data may be retained indefinitely. Identifiable analytics data is deleted after 26 months.
8. Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you. We will respond within 30 days of receiving your verified request.
Right to Rectification
You may request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You may request that we delete your personal data, subject to certain legal exceptions (e.g. where we are required to retain data for tax or legal compliance). Also known as the "right to be forgotten".
Right to Data Portability
You may request a machine-readable copy of your personal data so that you can transfer it to another service provider.
Right to Restrict Processing
You may request that we limit how we use your data in certain circumstances, such as when you contest its accuracy.
Right to Object
You may object to the processing of your personal data for direct marketing purposes or where we rely on legitimate interests as the legal basis.
To exercise any of these rights, please email us at privacy@thedemosite.com. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. International Data Transfers
Your data may be transferred to and processed in countries outside the United Kingdom. Where we do so, we ensure that appropriate safeguards are in place, including:
- Transfers to countries recognised as providing adequate protection by the UK Secretary of State
- Standard Contractual Clauses (SCCs) approved by the ICO
- Binding Corporate Rules where applicable
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting a prominent notice on our website or by sending you an email. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: