Privacy Notice

1. Who we are

Mainstreet Live ("Mainstreet", "we", "us") operates the Mainstreet landing page builder for local businesses. For personal data processed through our website and service, Mainstreet Live acts as the data controller: we decide why and how that data is used. You can reach us any time through our support page.

Where our customers publish their own pages and collect orders or appointment requests from their visitors, that customer is the controller of the data they collect, and Mainstreet Live acts as their processor.

2. Data we collect and why

• Account data — name, email address and login credentials. Used to create and secure your account and to contact you about your account. Legal basis: performance of our contract with you.
• Page content — business details, images, catalogues, opening hours and anything else you add to your pages. Used to host and publish your pages. Legal basis: performance of our contract.
• Order and appointment records — details submitted by visitors to pages you publish. Used to deliver the ordering and booking features to you. Legal basis: performance of our contract (as your processor).
• Support messages — the content of your enquiries. Used to answer you and improve the service. Legal basis: legitimate interests.
• Usage and device data — page views, visit counts, approximate location derived from IP address, browser and device identifiers. Used for analytics shown in your dashboard, service security and fraud prevention, and product improvement. Legal basis: legitimate interests.
• Legal and financial records — records we must keep for accounting and compliance. Legal basis: legal obligation.

Payments for Mainstreet subscriptions are handled by Paddle as Merchant of Record. Card details are collected and processed by Paddle, not by us; we only receive confirmation of your purchase and subscription status.

3. Who we share data with

• Service providers and subprocessors: hosting, database, email delivery and analytics providers.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities and regulators where we are required to do so by law.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and page data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer for accounting, tax or legal purposes.

6. Your rights

Subject to the law that applies to you, you may request access to your data, correction, erasure, restriction of processing, portability, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. Contact us through our support page and we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, row-level database security and least-privilege access for our team.

8. Cookies

We use essential cookies to keep you signed in and to keep the service secure. We also use limited analytics cookies and similar identifiers to count page visits. We do not use advertising cookies for tracking across other websites. You can clear or block cookies in your browser settings; essential cookies are required for sign-in to work.

9. Changes

We may update this notice. Material changes will be highlighted on this page with a new "last updated" date.