Privacy policy
How we collect, use and protect your personal data.
Last updated: 26 October 2026
This policy explains how Building Websites ("we", "us") collects and uses personal data when you visit buildingwebsites.co.uk or contact us. Building Websites is a service of SaaSmation, a company registered in Estonia (registry no. 17274612), Männimäe/1, Pudisoo küla, Kuusalu vald, Harju maakond, 74626, Estonia, which is the data controller.
Contact
For any privacy question or request, email info@buildingwebsites.co.uk.
What we collect
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, work email, company, phone (optional), role, number of client websites, plan interest and your message, sent through our demo form | To arrange your demo, answer questions and follow up about our service | Your consent and our legitimate interest in responding to business enquiries | Up to 24 months after our last contact, unless you become a customer |
| Emails you send us | To reply and keep a record of our correspondence | Legitimate interests | Up to 24 months after our last contact |
| Usage data (pages viewed, approximate location, device and browser) via Google Analytics 4 | To understand how the site is used and improve it | Consent: only collected if you accept analytics cookies | 14 months |
| Technical and security data (IP address, request details, anti-spam signals) | To keep the site and forms secure and working | Legitimate interests | Typically up to 30 days in server and security logs |
Who we share data with
We use carefully selected service providers who process data on our behalf:
- 20i Ltd: website hosting (UK data centres).
- Agency Control Plane (operated by SaaSmation): form handling, consent management, analytics loading and website monitoring.
- Google Ireland Ltd / Google LLC: Google Analytics 4 (only with consent) and Search Console.
- Cloudflare, Inc.: Turnstile spam protection on forms, where enabled. Otherwise we use ALTCHA, a privacy-friendly proof-of-work check that does not set tracking cookies.
- Our email provider, to receive and reply to enquiries.
We do not sell your personal data.
International transfers
Some providers (such as Google and Cloudflare) may process data outside the UK and EEA. Where they do, transfers rely on adequacy regulations or decisions, including the UK–US data bridge and EU–US Data Privacy Framework where the provider is certified, or on standard contractual clauses.
Your rights
Under UK GDPR and the EU GDPR you can ask to access, correct or delete your data, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time, including by changing your cookie settings. Email info@buildingwebsites.co.uk and we will respond within one month.
You can complain to the UK Information Commissioner's Office (ico.org.uk) or the Estonian Data Protection Inspectorate (aki.ee). We'd appreciate the chance to help first.
Cookies
See our cookie policy for details of the cookies we use and how to control them.
Changes
We may update this policy. The date at the top shows when it last changed.