How Text Align uses, protects and retains information connected with accounts and hosted websites.
Last updated: 19 October 2026
Text Align is the data controller for information used to provide and administer your Text Align account, including account, billing, support and service-security information.
For personal information that a Text Align customer collects through their own website, that customer will normally be the data controller and Text Align acts as its service provider or data processor.
For questions or data-rights requests, please use the Text Align contact form.
This may include account and team-member details, website content and uploaded media, messages and form submissions, orders and bookings, billing records, support correspondence, and limited security and service-usage logs.
Customers are responsible for ensuring that information uploaded to their websites has been collected and used lawfully.
We process information to provide and secure the service, host and deliver websites, administer accounts and billing, respond to support requests, prevent misuse, meet legal obligations and protect legitimate business interests.
The applicable lawful basis depends on the information and purpose. It may include performance of a contract, compliance with a legal obligation, legitimate interests or consent where consent is required.
Active website images, audio, documents and related thumbnails are stored in Cloudflare R2 for as long as they remain part of the service or until they are deleted in accordance with the account and website lifecycle.
Media Library deletion places an image, audio file, document or video into a 30-day recovery state before its active local, R2 or Cloudflare Stream storage is permanently removed. This recovery state reuses the existing stored item and does not create an additional copy. An authorised website user may restore it or permanently delete it earlier. Removing a whole website follows the separate account and website deletion lifecycle.
After a verified R2 upload, Text Align may retain a local server copy for up to 30 days to support safe rollback. Eligible local copies are then removed automatically only after the active R2 object and its independent backup have been verified.
Independent private R2 backups protect website media and paid digital-product files against deletion and overwriting for 365 days from the time each backup object is created. They are scheduled for automatic deletion after 365 days; Cloudflare normally completes lifecycle deletion within approximately 24 hours after an object becomes eligible.
When a website deletion is prepared, a fresh dated private snapshot of its current media and digital-product files is created and verified for the final deletion backup. When the displayed 30-day recovery period ends, active R2 media is removed and verified before the retained website database and local files are deleted. The protected final snapshot remains inaccessible in the separate backup system until its 365-day retention period expires. Backups are used only for security, disaster recovery and restoration.
Cloudflare Stream video is managed separately from the R2 media backup. It uses the same 30-day Media Library recovery state, but is not included in the 365-day R2 backup.
Different records may need different retention periods. Account and billing records may be kept where required for tax, accounting, dispute-resolution or other legal purposes. Security logs and support records are kept only for as long as reasonably necessary for their purpose.
When a website or account is closed, Text Align follows the displayed recovery and deletion process. Information may remain in restricted backups until the relevant backup-retention period ends.
Text Align uses carefully selected infrastructure and service providers, including Cloudflare for media delivery, storage and video services. Providers process information only to deliver their contracted services and are subject to appropriate contractual and security safeguards.
Where information is processed outside the UK, Text Align uses an applicable lawful transfer mechanism and appropriate safeguards.
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict your personal information, object to certain processing, receive portable information, and withdraw consent where processing relies on consent.
If your request concerns information collected by a customer's website, contact that website owner first. You may also complain to the UK Information Commissioner's Office.
Text Align uses access controls, protected configuration, verified backups and other technical and organisational safeguards. No online service can guarantee absolute security.
This notice may be updated when the service, providers or legal requirements change. Material changes will be identified by the date shown above.