Privacy Policy
Effective date: 14 Oct 2025
Who we are: BuildArc (“we”, “us”, “our”) provides Built Environment and Marketing consulting, tools and workshops.
- Legal entity name: BuildArc Ltd
- Email: info@buildarc.co
- Website: https://buildarc.co
- Data controller: BuildArc is the controller of your personal data for this website and our marketing.
1) What data we collect
We only collect what we need:
- Contact data: name, email address, company, role, and anything you include when contacting us.
- Marketing preferences: which updates you want (e.g., Workshops, Templates & Tools, Consulting).
- Website usage data: IP address, device/browser info, pages viewed, referring URLs (via cookies/analytics—see Cookies section).
- Transaction/contract data (if you buy or engage us): billing name, company, address, VAT number, purchase history, and related communications.
We do not intentionally collect special category data.
2) How we collect it
- Directly from you (forms, email sign-ups, enquiries, bookings).
- Automatically via our website (cookies, server logs).
- From third-party tools you choose to use with us (e.g., meeting links, payment processors, form tools).
3) Why we use your data (lawful bases)
| Purpose | Examples | Lawful basis |
|---|---|---|
| Responding to enquiries | Contact forms, email threads | Legitimate interests (to run our business and reply) |
| Providing services / fulfilling a contract | Proposals, statements of work, delivery communications, support | Contract |
| Sending newsletters and updates | Email list, service/topic preferences | Consent (you can withdraw anytime) |
| Improving our site and services | Basic analytics, performance, anti-abuse | Legitimate interests |
| Legal/financial compliance | Invoices, tax records, record-keeping | Legal obligation |
4) Sharing your data (processors we use)
We use trusted providers to run our website and email:
- Website hosting & infrastructure: IONOS (UK/EU).
- Content management: WordPress and selected plugins (for forms, caching, security).
- Email marketing: MailerLite (manages our subscriber list, consent logs and campaigns).
- Analytics/other tools: Google Analytics
These providers act under our instructions as processors. We only share what’s necessary and we have appropriate contracts in place.
5) International transfers
Some providers may process data outside the UK/EEA. Where this happens, we rely on adequacy regulations or Standard Contractual Clauses (SCCs) plus supplementary measures to protect your data.
6) How long we keep data
- Enquiry emails: up to 24 months after last meaningful contact.
- Marketing subscribers: until you unsubscribe or your address bounces, with periodic cleansing.
- Contract/finance records: typically 6 years (UK HMRC requirements).
We may keep minimal suppression records to respect future opt-outs.
7) Your rights (UK GDPR / EU GDPR)
You have the right to:
- Access your data and get a copy.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”) where applicable.
- Restrict or object to certain processing (including marketing).
- Data portability for information you provided to us.
- Withdraw consent at any time (does not affect prior lawful processing).
- Complain to the UK ICO or your local authority.
How to exercise: email info@buildarc.co.
UK regulator: Information Commissioner’s Office – ico.org.uk.
8) Marketing and newsletters
- We use double opt-in to confirm your email address and record consent.
- You can unsubscribe at any time via the link in any email or by contacting us.
- You can manage your preferences (e.g., updates about Workshops, Templates & Tools, or Consulting) via the link in our emails.
9) Cookies & analytics
We use cookies for core site functions and (optionally) privacy-respecting analytics.
- Strictly necessary cookies: required for the site to function and security.
- Analytics cookies: help us understand visits and improve content ([Plausible/Google Analytics]—configure accordingly).
On your first visit, you’ll see a cookie notice with options. You can change your preferences at any time via our Cookie Settings link. For details, see our Cookie Policy.
10) Security
We use HTTPS, access controls, and reputable providers. No method is 100% secure, but we continually review our measures and limit access to those who need it.
11) Third-party links
Our website may link to external sites. Their privacy practices are their own—please review their policies.
12) Children
Our services are intended for professionals. We do not knowingly collect data from children under 16.
13) Changes to this policy
We may update this policy from time to time. We’ll post the new version here and update the Effective date.
14) Contact us
Questions or requests about your personal data:
Email: info@buildarc.co
Optional: Service-specific notes (edit or remove)
MailerLite (email marketing)
We use MailerLite to manage subscriptions, record consent and send emails. When you subscribe, your email address, IP, and preferences are processed by MailerLite for this purpose. You can unsubscribe at any time via the link in any message.
Contact forms / WordPress
When you submit a form on our site, we receive the details you provide. If a security or anti-spam plugin is active, your IP and basic device data may be processed to prevent abuse.
Payments / invoices
If you purchase services, limited personal data may be shared with our accounting or payment providers solely to process payments, issue invoices and meet legal obligations.