privacy policy

Last updated: October 27, 2025

Lleu Labs Inc. ("Lleu Labs," "lleu labs" "we," "our," or "us") is a service that offers website hosting and we value your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices. It applies to lleu.site, the website builder service, and related services.

Our website creation service is available to residents of Australia, Austria, Barbados, Belgium, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, Malta, Netherlands, New Zealand, Norway, Poland, Portugal, Romania, Singapore, Slovakia, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Thailand, Trinidad and Tobago, United Kingdom, Jamaica.

Please note: While our website creation service is only available in the countries listed above, websites created using lleu.site are accessible to visitors worldwide.

If you have any questions, contact us at help@lleulabs.com.

1. What Information We Collect

We collect only the information needed to provide our service:

Account details such as email, password (encrypted), and billing information

Billing and payments handled securely by Square (their privacy policy governs your use of their payment portals)

Tenant and website data including the content you upload (such as text, images, contact information). You control whether this information is displayed publicly on your website

Communication information such as your email, which may be used for platform updates, service notices, or optional newsletters

Cookies which are only essential session cookies for login and account use

System logs which are kept to ensure security and stability of our platform

We do not use analytics or tracking cookies.

1a. Website Visitor Information

When you visit websites hosted on lleu.site (yourname.lleu.site):

We do not collect, store, or track any personal information about you

We do not use cookies, analytics, or tracking tools on user websites

System logs may record basic technical information (IP addresses, timestamps, requested pages) for security and system maintenance only

These logs contain no personally identifiable information and are not linked to individual visitors

We do not sell, share, or provide any visitor data to third parties

1b. Contact Form Submissions & Email Collection on Websites

When a visitor submits a contact form (or any form that collects personal data) on lleu.site or on any website created with our platform, the following applies:

Data collected: The form may collect the visitor’s name, email address, subject, message, and any custom fields added by the website owner. Name, email, subject, and message are encrypted at rest using AES-256 and in transit via TLS 1.3.

Optional marketing opt-in: If the form includes a checkbox labeled “I agree to receiving marketing emails from this website (optional)” and the visitor actively checks it, this opt-in status is collected and exported to the website owner. Lleu Labs does not send, process, or store marketing emails.

Storage location: Only the encrypted message content and opt-in status (if any) are stored on OVH servers in Canada (Quebec/Toronto) and France. Backups follow the same geographic locations.

Retention: Submissions are stored indefinitely, subject to the individual website owner’s discretion and management (for user websites). Website owners may delete individual submissions or all submissions at once via their dashboard. On the main site (lleu.site), submissions are retained indefinitely unless deleted by Lleu Labs for legal or operational reasons.

Optional email forwarding: If the website owner has configured a contact email address, a plaintext copy of the submission (name, email, subject, message, and opt-in status) is forwarded using Maileroo (Canada). Maileroo acts as a data processor under a Data Processing Agreement and is bound by contractual data protection obligations.

Legal bases (GDPR/UK GDPR): Form data is processed under contract (to deliver messages to the website owner). Marketing opt-in is processed under consent (only if the checkbox is actively checked and exported).

Acceptance of Privacy Policy: By submitting the form, you confirm that you have read and accept this Privacy Policy.

Visitor rights: Submitters may request access, correction, or deletion of their form data by contacting the website owner directly or emailing help@lleulabs.com (we will forward the request). Marketing consent can be withdrawn at any time.

Children’s data: Our contact form functionality is not directed at children. If a website owner knowingly collects personal data from individuals under the age of majority, they are solely responsible for compliance with applicable laws (e.g., COPPA, GDPR-K).

No third-party sharing by Lleu Labs: Lleu Labs does not sell, rent, or share form submission data with any third parties for marketing, analytics, or commercial purposes. Once data is exported or forwarded to the website owner, they control its use and are responsible for compliance with applicable privacy laws.

2. How We Use Information

We use your information to provide and maintain your account and websites

We use it to process payments (through Square)

We use it to communicate with you about your account or important service updates

We use it to ensure the security and stability of our systems

We may use it to send optional newsletters or promotional emails (with your consent)

3. Legal Grounds (EU/UK users)

Under GDPR/UK GDPR, we process data on these bases:

Contract: running your account, billing, hosting your websites

Legal obligation: recordkeeping for tax and compliance

Legitimate interest: system security, abuse prevention

Consent: when you choose to receive marketing emails, or when you publish personal information on your websites

4. Sharing Information

We do not sell, rent, or share your personal data or any website visitor data with third parties for marketing or commercial purposes.

We may share limited account holder information only with:

Square – for payment processing

Maileroo – for email delivery

BunnyCDN – for website caching

OVH – our hosting provider (servers in Canada and France)

All providers are under contracts that protect your data. Website visitor data is never shared with any third parties.

5. User-Generated Content

You control what content is published on your websites. If you choose to post personal or sensitive information publicly, you do so at your own responsibility. Lleu Labs is not liable for disclosures made by you or your website visitors.

6. Data Storage and Retention

Account data is stored on servers in Canada (Quebec/Toronto) and France (OVH)

Backups and logs are kept as long as reasonably needed for system integrity and security

If you delete your account, account data is removed within 30 days

7. Your Rights

Depending on your location (Canada, EU, UK), you have rights to:

Access, correct, or delete your personal information

Export your data

Withdraw consent to marketing emails at any time

Restrict or object to certain processing

You can manage most of these directly in your account settings, or by contacting us at help@lleulabs.com.

8. Security

We use reasonable technical and organizational safeguards (such as encryption and access controls) to protect your data. No system is 100% secure, but we work to keep your information safe.

9. Age Requirements

Our service requires users to be the age of majority in their country of residence (18 in most jurisdictions, 19 in some Canadian provinces). We do not provide services to minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or within the platform before the changes take effect.

11. Contact Us

If you have questions or concerns, contact us:

Lleu Labs Inc.
Email: help@lleulabs.com

go to lleu.site homepage