Privacy Policy
Last updated: 23 August 2026
Nature Websites is operated by Orlando Prugel-Bennett, a sole trader based in the United Kingdom ("we", "us"). This policy covers the Nature Websites site at naturewebsites.com, the photography websites we host for our customers, and the Nature Websites mobile app for Android and iOS.
For customer accounts we are the data controller. For photographs and other content our customers publish on their own sites, the customer is the controller and we are their processor.
Questions, requests or complaints: info@naturewebsites.com.
What we collect
| Data | Why | Kept |
|---|---|---|
| Account details — email address and name | To create and sign you into your account, to contact you about your account, and for billing | Until you delete your account |
| Photos, videos and the information attached to them (captions, album names, camera settings, capture date and time, and location if your camera recorded it and you did not strip it) | To store and publish them on your website | Until you delete them or your account |
| Site settings and content you enter — site name, domain, page text, album structure | To build and serve your website | Until you delete your account |
| Payment records — subscription status and invoices | To take payment and meet UK tax and accounting obligations | Payment records are kept for 6 years as required by law |
| App only: a push notification token issued by Google (FCM) or Apple (APNs), and a random device identifier generated on your device | To send the notifications you have asked for, and to remember which sites you follow and how often you want to hear from them | Until you turn notifications off, sign out, or uninstall the app |
| App only: photos you take or choose in the app | They are uploaded to your own website; nothing else is read from your camera or photo library | Same as any other photo on your site |
| Visit counts | To show site owners how many views their pages and photos get | Indefinitely, as aggregate numbers only |
What we do not collect
- We do not use third-party advertising or tracking networks, and we do not sell or share your data with data brokers or advertisers.
- Our visitor analytics store counters only — page views, unique visits and per-photo views. We do not build visitor profiles, and we do not store visitors' IP addresses or browsing histories in them.
- We never see your card details. Payments are handled by Stripe, which receives them directly.
- The app does not collect your location, contacts, or the contents of your photo library. It does not track you across other apps or websites.
Cookies and local storage
We use cookies and browser local storage only to keep you signed in, to remember your preferences, and to avoid counting the same visitor twice in the view counts. We do not use advertising cookies.
Where your data is stored, and who we share it with
Data is held in the United Kingdom and the European Economic Area. We use a small number of service providers, and only for the purposes above:
- Amazon Web Services (London region, eu-west-2) — file storage, databases, sign-in (Amazon Cognito), and push delivery
- IONOS — web hosting
- Cloudflare — content delivery and protection against abuse
- Stripe — payment processing
- Google (Firebase Cloud Messaging) and Apple (APNs) — delivery of push notifications to your device
We also disclose data if the law requires it.
Legal basis (UK GDPR)
- Contract — running your account, hosting your site and storing your photos.
- Consent — push notifications. You grant permission on the device and can withdraw it at any time in your phone's settings or in the app.
- Legitimate interests — keeping the service secure and working, and giving site owners aggregate view counts.
- Legal obligation — keeping payment and tax records.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or ask for it in a portable format. Email info@naturewebsites.com and we will respond within one month.
Deleting your account and app data. You can delete your account from your dashboard, under Account settings. Deleting the account removes your photos, videos, site content and account details from our systems. To remove the app's push data only, turn notifications off in the app or uninstall it — the device record is removed. Backups are overwritten on their normal cycle and are fully cleared within 90 days.
If you think we have handled your data badly you can complain to the UK Information Commissioner's Office at ico.org.uk.
Security
All traffic to the site and the app is encrypted with HTTPS. Passwords are managed by Amazon Cognito and are never stored by us in a form we can read. Access to production data is limited to the operator of Nature Websites.
Children
Nature Websites is not aimed at children and we do not knowingly collect data from anyone under 13. If you believe a child has given us data, email us and we will delete it.
Changes
If this policy changes we will update the date at the top of this page, and we will tell account holders by email before any material change takes effect.