Privacy Policy

1. Who we are

BuiltWeb ("we", "us", "our") is the data controller responsible for any personal data we collect about you when you use our website at builtweb.co.uk or purchase our services.

Address: 5 Claremont Road, Harrow HA3 7AU, United Kingdom
Email: admin@builtweb.co.uk
Phone: 07564 623326

This policy explains what personal data we collect, how we use it, who we share it with, how long we keep it and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We collect the following categories of personal data:

Enquiry data

• Full name
• Email address
• Business name
• Phone number (if provided)
• Your website URL (if provided)
• The package and add-ons you are interested in, and any message or project details you send us

Newsletter data

• Email address, if you sign up to our newsletter

Project data (once you become a client)

• Project requirements, content, logo files, brand colours and design assets you provide
• Email correspondence with our team

We do not take payments through this website and do not collect or store card details. Deposit and final invoices are sent and paid separately.

Technical data

• IP address
• Browser type and device information
• Pages visited and time spent on the site
• Cookies and similar technologies (see section 6)

3. How we use your data

We use your personal data for the following purposes:

4. Who we share your data with

We never sell your data. We share data only with trusted service providers who help us run BuiltWeb:

• Resend — enquiry and newsletter emails
• Vercel — website hosting and CDN
• Hostinger — email hosting for our business addresses

All of these providers are bound by data processing agreements and process your data only on our instructions in accordance with UK GDPR.

We may also disclose your data if required by law, court order, or to protect our rights, property or the safety of others.

5. International transfers

Some of our service providers (such as Resend and Vercel) process data in the United States or other countries outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised by the UK Information Commissioner's Office (ICO).

6. Cookies

We use the following types of cookies:

Essential cookies (always on)

Required for the site to function — security and consent preferences. These cannot be turned off.

Optional cookies (require consent)

Anonymous analytics that help us understand how visitors use the site so we can improve it. We will only use these if you give consent via the cookie banner. You can change your choice at any time by clearing your browser data and revisiting the site.

We do not use third-party advertising cookies.

7. How long we keep your data

• Enquiries: we keep enquiry details for up to 2 years so we can follow up and respond to related queries.
• Clients: we keep project data for the duration of your project and for a reasonable period afterwards for support purposes.
• Newsletter: we keep your email until you unsubscribe.
• Billing & tax records: we are legally required to retain financial records for 6 years after the end of the relevant tax year.
• Email correspondence: kept for 2 years for support and legal purposes.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data, subject to legal retention requirements
• Right to restrict processing — ask us to stop processing your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time
• Right not to be subject to automated decision-making — we do not make decisions that significantly affect you using only automated processing

To exercise any of these rights, email us at admin@builtweb.co.uk. We will respond within one calendar month.

9. Complaints

If you are unhappy with how we have handled your personal data and we cannot resolve your concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Phone: 0303 123 1113
Website: ico.org.uk

10. Security

We take the security of your data seriously and use industry-standard measures including encryption in transit (TLS), encrypted database storage, secure authentication, regular backups and access controls. While we cannot guarantee absolute security, we follow best practices to protect your data from unauthorised access, loss or misuse.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO without undue delay (within 72 hours where feasible).

11. Children

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page reflects the latest version.

13. Contact us

If you have any questions about this privacy policy or how we handle your data:

BuiltWeb
5 Claremont Road
Harrow HA3 7AU
United Kingdom

Email: admin@builtweb.co.uk
Phone: 07564 623326