Privacy Policy

Introduction

Building Blocks ("we", "us", "our") is a digital solutions agency providing web and software development, digital marketing, branding, graphic design and video, cyber security, and related services to businesses, startups, charities, and other organisations.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, or engage us as a client. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

For the purposes of data protection law, Building Blocks is the "data controller" of the personal information described in this policy.

Data Controller details:

• Organisation name: Building Blocks
• UTR Number: 18391 52725
• Contact email: info@buildingblocks.digital

Information We Collect

We may collect the following categories of personal information:

• Contact details - name, email address, phone number, job title, company name
• Enquiry and project information - details you share when requesting a quote, booking a call or briefing a project
• Communications - emails, messages, and call notes exchanged with you
• Website usage data - pages visited, time on site, referral source, device and browser type, collected via cookies and analytics tools
• Marketing preferences - whether you've opted in to receive newsletters or updates from us
• Payment and billing information - for clients, limited to what's necessary to invoice and process payments (processed via our payment provider; we do not store full card details)
• Reviews and testimonials - feedback you provide via Trustpilot or directly to us, which we may display publicly with your permission

We do not knowingly collect special category data (such as health, religion or ethnicity) unless you voluntarily provide it as part of a project brief, and only where relevant to delivering that project.

How We Collect Information

We collect information when you:

• Fill out a contact or enquiry form on our website
• Email, message or call us directly
• Engage us as a client and share project requirements
• Browse our website (via cookies and similar technologies)
• Interact with our social media pages or ads
• Leave a review via Trustpilot or another platform

How We Use Your Information

We use personal information to:

• Respond to enquiries and provide quotes
• Deliver, manage and support projects and services
• Send invoices and process payments
• Send marketing communications, where you've consented (you can opt out at any time)
• Improve our website and services based on usage patterns
• Comply with legal and accounting obligations
• Protect our business, clients and website against fraud or misuse

Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract - processing necessary to deliver a service you've engaged us for
• Consent - for marketing communications and non-essential cookies
• Legitimate interests - for responding to enquiries, improving our services and basic website analytics, where this doesn't override your rights
• Legal obligation - for record-keeping required by tax, accounting, or other regulations

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Enable core site functionality
• Understand how visitors use our site (analytics)
• Support advertising and remarketing campaigns

You can control or disable cookies through your browser settings. Disabling some cookies may affect how the site functions. Where required by PECR, we'll ask for your consent to non-essential cookies via a cookie banner before they're set.

Third Party Services and Data Sharing

We work with trusted third party providers to deliver our services and run our website, which may process personal information on our behalf, including:

• Website hosting and content management (e.g. Vercel, Sanity)
• Analytics providers (e.g. Google Analytics)
• Advertising platforms (e.g. Google Ads, Meta Ads, TikTok Ads)
• Review platforms (e.g. Trustpilot)
• Payment processors (e.g. Stripe)

These providers only process data in line with our instructions and applicable data protection law. We do not sell personal information to third parties.

We may also share information where required by law, to protect our legal rights, or as part of a business transfer (such as a merger or acquisition).

International Data Transfers

Some of our third-party providers may process data outside the UK or European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the provider's participation in a recognised data protection framework.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting requirements. Client and project data is typically retained for 10 years after the end of our engagement, after which it is securely deleted or anonymised.

Data Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration, including secure hosting, access controls and encryption where appropriate. While we take security seriously, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Rectify inaccurate or incomplete information
• Erasure ("right to be forgotten"), in certain circumstances
• Restrict processing of your information
• Object to processing based on legitimate interests or for direct marketing
• Data portability - receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at info@buildingblocks.digital. We may need to verify your identity before responding.

If you're unhappy with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Children's Privacy

Our services are intended for businesses and individuals over the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically.