Privacy notice
This notice explains what happens to the details you send Built Local Co. when you request a free website preview, and what you can ask us to do with them.
Who we are
Built Local Co. designs, builds and looks after websites for local service businesses. We're a remote studio based in Midtown Atlanta, GA. For anything about your details or this notice, email hello@builtlocalco.com.
What we collect
- What you tell us in the Website Studio: your business name, trade, where you work, whether you have a website (and its address, if you give it), your main goal, the size and style you prefer, and anything you write about what makes your business different.
- Your contact details: your first name, email address and, if you choose to give it, a phone number.
- A spam check: when you send a request, Cloudflare Turnstile checks that it comes from a person rather than a bot. To do this, Cloudflare processes technical information such as your IP address and details about your browser and device.
- Visit statistics: we use Cloudflare Web Analytics to count visits and see which pages are viewed. It doesn't use cookies and doesn't follow you across other websites.
- Technical logs: like most websites, our hosting keeps short-lived logs of requests to the site, which may include your IP address, so we can keep it secure and fix problems.
While you fill in the Studio, your answers are also saved in your own browser so you don't lose them. That copy stays on your device and is cleared when your request is sent successfully.
Why we use it
- To review your request and, if it's a good fit, design a preview of your homepage.
- To email you about your request, including a confirmation and your private preview link.
- To keep the website working, secure and free of spam.
We don't sell your details or share them for advertising, and we don't add you to a mailing list.
Who handles it for us
We use a small number of service providers. They handle your details only to provide their service to us:
- Cloudflare: hosts the website on its global network, runs the spam check, and provides visit statistics and technical logs.
- Supabase: stores your request in a database hosted in the United States (US East).
- Resend: sends the emails about your request, from the United States (US East).
- Google Workspace: hosts our email. A copy of your request is emailed to our inbox, and emails you exchange with us are kept there.
How we protect it
Your request travels to us over an encrypted (HTTPS) connection and is stored in a database that is encrypted at rest and can't be read by the public. Access to stored requests is limited to Built Local Co.'s authorized accounts. Our service providers can access data only as needed to run their services for us, under their own security and confidentiality commitments.
How long we keep it
We keep preview requests for 12 months from the date we receive them. An automatic process deletes stored requests once they're 12 months old. The copy of your request emailed to our inbox is moved to the trash on the same schedule. Our email provider empties the trash after 30 days and can recover deleted email for up to 25 days after that, so these copies are permanently gone within about 55 days. If you become a customer, we keep the details we need to provide the service for as long as you're a customer.
Other emails you exchange with us are kept for as long as we need them to respond to you and keep our business records. Our service providers keep their own short-lived technical records, such as delivery and security logs, for limited periods under their own policies.
Your choices
You can ask us to show you, correct or delete the details we hold about you. Email hello@builtlocalco.com, ideally from the address you used in your request so we can confirm it's you. We aim to respond within 30 days, or sooner if the law where you live requires it.
Do Not Track
Our website doesn't track you across other websites, so it treats every visitor the same whether or not their browser sends a "Do Not Track" signal.
Children
Our services are for businesses. We don't knowingly collect details from children under 13. If you think a child has sent us their details, email us and we'll delete them.
Changes to this notice
We may update this notice from time to time. When we do, we'll post the new version here and change the effective date at the top. If we make a significant change to how we use details you've already sent us, we'll let you know in an appropriate way, as the law requires.