PRIVACY
POLICY
I keep things simple. I only collect what I need, I keep it safe, and I never sell it. This policy explains exactly what data is collected when you use this website and contact me.
Who I Am
Builtly is a trading name of Zara Munkley, a sole trader based in the United Kingdom and registered in England. I am the data controller for the personal data collected through this website (builtly.co.uk).
If you have any questions about how your data is handled, you can contact me at hello@builtly.co.uk.
What Data I Collect
I only collect personal data that you choose to provide. When you submit the contact form on this website, the following information is collected:
| Data collected | Why I collect it | Legal basis |
|---|---|---|
| Your name | To address you personally in my response | Legitimate interest |
| Business name | To understand the context of your enquiry | Legitimate interest |
| Email address | To respond to your enquiry | Legitimate interest |
| Service interest | To understand which service you're enquiring about | Legitimate interest |
| Project description | To understand what you need and respond helpfully | Legitimate interest |
I do not collect sensitive personal data, financial information, or any data from children under 16.
How I Use Your Data
I use the information you provide solely to:
- Respond to your enquiry and answer your questions
- Assess whether Builtly is a good fit for what you need
- Follow up if you have not received a response
I will not use your data to send unsolicited marketing emails unless you explicitly ask to receive them. I will not add you to any mailing list without your consent.
How I Store Your Data
Contact form submissions are processed by FormSubmit (operated by Formspree Inc., USA), which receives your submission and delivers it as an email to my inbox at hello@builtly.co.uk. FormSubmit does not retain a permanent copy of submissions on its servers beyond delivery; it operates under the EU-U.S. Data Privacy Framework, which provides appropriate safeguards for international transfers.
The email inbox itself is hosted by Namecheap Private Email, whose servers are located within the European Economic Area. This is where your enquiry is read and retained.
I retain enquiry data for up to 24 months after the last contact, after which it is deleted. If you proceed to become a client, your data is retained for the duration of our working relationship and for up to 6 years thereafter for legal and accounting purposes.
I do not store form submissions in any third-party database or CRM without your knowledge. I do not use any tracking pixels or behavioural analytics on this website.
Meeting Recordings
When we have a video meeting — typically a Health Check session, Discovery call, or project conversation — I may record the meeting using the video conferencing platform used for the call. The purpose is to help me write up accurate notes and proposals afterwards, without missing details you've shared with me.
I will always tell you at the start of the call if recording is happening, and ask for your verbal consent before the recording begins. You can decline and the meeting will continue without recording. Most video platforms also display an on-screen notification when recording is active.
| What is recorded | Where it is stored | How long it is kept |
|---|---|---|
| Audio and video of the meeting, plus any chat messages exchanged during the call | On the cloud storage of the video conferencing platform used for the call (e.g. Google Meet, Zoom, or Microsoft Teams) | Until your Service Agreement is signed, then deleted within 24 hours. If no agreement follows, deleted within 30 days of the recorded meeting. |
The lawful basis for this processing is legitimate interest — accurately capturing what was discussed so I can deliver a clear, faithful proposal. Recordings are used only for that purpose. They are never shared with third parties, used for marketing, used to train AI systems, or kept beyond the deletion window above.
If you would prefer the meeting not to be recorded, just tell me. There is no need to give a reason and it makes no difference to how I work with you.
Who I Share Your Data With
I do not sell, rent, or share your personal data with third parties for marketing purposes.
Your data may be accessible to the following service providers strictly as necessary to operate the business:
- FormSubmit (Formspree Inc.) — contact form submission processing and delivery
- Namecheap / Private Email — email hosting and delivery
- Netlify — website hosting (does not process form data)
- Video conferencing platforms (such as Google Meet, Zoom, or Microsoft Teams) — only if we have a recorded meeting, and only for the limited storage period described in Clause 04b
All providers used are either based in the UK/EEA or operate under appropriate data transfer safeguards (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses).
I may disclose your data if required by law or to protect Builtly's legal rights.
Cookies
This website does not currently use cookies for tracking, analytics, or advertising purposes. I do not use Google Analytics or any similar tracking service.
If cookies are introduced in the future, this policy will be updated and a cookie consent notice will be added to the site before any are set.
Your Rights Under UK GDPR
As a UK resident, you have the following rights in relation to your personal data:
You can request a copy of the personal data I hold about you.
You can ask me to correct any inaccurate data I hold.
You can ask me to delete your personal data in certain circumstances.
You can ask me to limit how your data is used in certain situations.
You can object to your data being processed based on legitimate interest.
You can request your data in a structured, machine-readable format.
To exercise any of these rights, email me at hello@builtly.co.uk. I will respond within 30 days. There is no charge for reasonable requests.
If you are unhappy with how I have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Children's Privacy
Builtly's services are intended for business owners and professionals. I do not knowingly collect personal data from anyone under the age of 16. If you believe data has been inadvertently collected from a minor, please contact me immediately and it will be deleted.
Changes to This Policy
I may update this Privacy Policy from time to time as Builtly's services or legal obligations change. The date at the top of this page shows when it was last revised. I recommend checking back periodically.
Significant changes will be noted clearly at the top of this page.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please get in touch.