5 Questions to Ask Your Website Provider About Data Sovereignty
Before choosing a website platform, ask these five questions about where your data lives, who can access it, and where your money goes. We've answered all five for you.
Data sovereignty has become one of the most important considerations for UK businesses choosing a website platform. But it can feel overwhelming — full of legal jargon and technical complexity. We've simplified it into five questions that every UK trade business should ask their website provider.
Question 1: Where are your servers physically located?
Why it matters: The physical location of your data determines which country's laws apply to it. Data stored on UK servers is governed by UK GDPR and UK data protection law. Data stored abroad may be subject to foreign legislation.
Red flag: Vague answers like "We use a global CDN" or "Our data is distributed across multiple regions." These phrases sound impressive but don't tell you where your actual data is stored. A CDN caches copies of your website for faster delivery — that's different from where your original data lives.
Our answer: Site Seedling's servers are based in the UK. Your website data, customer enquiries, and business content are stored on UK servers under UK jurisdiction.
Question 2: What country is your company registered in?
Why it matters: A company's country of registration determines its legal obligations. A US company is subject to US law (including the CLOUD Act) regardless of where it has offices or servers. A UK company answers to UK law.
Red flag: Answers that emphasise "global presence" or "offices worldwide" without clearly stating where the company is legally incorporated. The registered office is what matters, not the sales team's location.
Our answer: Site Seedling is a UK-registered company. We are incorporated in the United Kingdom and operate under UK law. We are not subject to the US CLOUD Act or any other foreign data access legislation.
Question 3: Can foreign governments legally access my data?
Why it matters: The US CLOUD Act (2018) allows US authorities to compel US companies to hand over customer data, regardless of where that data is stored. This means data held by Wix, Squarespace, or WordPress.com is accessible to US authorities — even if stored on European servers.
Red flag: Responses like "We comply with all applicable laws." This sounds reassuring but is actually a non-answer. The question is which laws — US laws that allow government access, or UK laws that restrict it?
Our answer: No. As a UK-registered company, no foreign government can compel us to hand over your data. Your data is subject to UK law only. We would only disclose information in response to valid UK legal requirements.
Question 4: Where is your support team based?
Why it matters: Support location affects response times, cultural understanding, and accountability. A UK-based support team operates in your timezone, understands UK business practices, and can relate to your specific needs.
Red flag: No phone support, chatbots only, or support hours listed in US Pacific or Eastern time. Also watch for providers who outsource support to different countries without disclosure.
Our answer: Site Seedling's support team is based in the UK. We operate during UK business hours, we understand the UK market, and we know the specific needs of UK businesses. When you contact us, you reach a real person who understands your context.
Question 5: Where does my subscription payment go?
Why it matters: Your subscription is more than a business expense — it's a vote for the kind of tech ecosystem you want. Money paid to a UK company supports UK jobs, pays UK taxes, and contributes to the UK economy. Money paid to a US corporation primarily benefits shareholders and the US economy.
Red flag: Billing entities registered in low-tax jurisdictions (Ireland, Luxembourg, Singapore) rather than the company's stated home country. This is common among large US tech companies and means your money may not contribute to any local economy.
Our answer: Your subscription payment goes to a UK-registered company. It supports UK jobs, pays UK taxes, and contributes to the UK technology economy. We believe in supporting the ecosystem we're part of.
How does your current provider measure up?
Try asking your current website provider these five questions. If they can answer all five clearly and transparently, that's a good sign. If you get vague responses, corporate jargon, or silence — it might be time to consider your options.
We've answered all five questions openly because we believe transparency is the minimum you should expect from the company that handles your business data.
Read our complete guide to data sovereignty for UK businesses →