Privacy Policy
Effective date: 01 August 2025
Built Dynamics is a trading name for BD Digital Services Limited
This Privacy Policy explains how Built Dynamics ("Built Dynamics", "we", "us", "our") collects, uses, discloses and protects personal data when you visit our websites, use our services, or interact with us. It applies to:
- Our corporate website and related pages;
- Our services and software products, including Built Query (together, the "Services").
We are the data controller for personal data we collect and determine the purposes and means of processing (e.g., account registration, support, billing, analytics). For customer content uploaded into Built Query, we generally act as a data processor on behalf of the relevant customer (see section "When we act as a processor").
If you do not agree with this Policy, please do not use the Services.
1. Who we are (Controller details)
Built Dynamics Ltd
Company number: 16280637
Registered office: Ryefield Court 81 Joel Street, Northwood Hills, Middlesex, United Kingdom, HA6 1LU
Email: privacy@builtdynamics.com
You can contact us at the email above for any privacy enquiries.
2. Scope & who this policy covers
This Policy covers personal data relating to:
- Website visitors, prospects and contacts;
- Users who register for or access Built Query;
- Client representatives and supplier contacts.
It does not cover personal data we process purely as a processor on behalf of our clients within Built Query (see "When we act as a processor").
3. What personal data we collect
Data you provide to us
- Registration & account data (Built Query): name, business email, company name, password (hashed).
- Contact & support: name, email, company, the content of your message or support ticket.
- Business operations: billing contact details, contractual correspondence.
Data we collect automatically
- Usage & technical data: IP address, device identifiers, browser type/version, pages viewed, time on page, referrers, error logs, and other diagnostic data.
- Cookies & similar tech: see "Cookies & analytics".
We do not intentionally collect special category data (e.g., health, ethnicity) or children's data. Please do not submit such data to us.
4. How we use personal data & our lawful bases
| Purpose | Examples | Lawful basis |
|---|---|---|
| Provide & operate Services | Create accounts; authenticate users; run Built Query; provide support | Contract (Art 6(1)(b)) |
| Service communications | Security, maintenance, changes to terms, critical notices | Legitimate interests (Art 6(1)(f)) and/or Contract |
| Improve & secure Services | Debugging, monitoring, capacity planning, preventing abuse | Legitimate interests |
| Analytics (non-essential) | Understand site usage, improve UX | Consent (PECR/Art 6(1)(a)) |
| Legal & compliance | Record keeping, tax, responding to lawful requests | Legal obligation (Art 6(1)(c)) |
| Prospecting (if applicable) | Respond to inbound enquiries | Legitimate interests |
Built Query registration data is processed on the basis of consent during sign-up and contract to deliver the service. We do not send marketing emails from Built Query. You can withdraw consent at any time (see "Your rights").
5. When we act as a processor (Built Query customer content)
For documents and data that our client uploads to Built Query, we typically act as a data processor; the client is the data controller. We process that data strictly under our client's instructions and our contractual terms (including, where applicable, a Data Processing Addendum). If you are an end user of a client account, please direct privacy requests to that client first.
6. Who we share personal data with (processors/sub-processors)
We use trusted third parties to help deliver, host and monitor the Services. These providers process data on our behalf under appropriate contracts:
- Supabase – Application hosting, database, and Built Query platform, hosted on Amazon Web Services (AWS).
We may also share personal data where required by law, in connection with a business transaction, or to protect rights and safety.
We maintain an up-to-date list of material sub-processors on request at privacy@builtdynamics.com.
7. International transfers
Some providers may process data in the EEA and/or United States. Where we transfer personal data outside the UK, we rely on appropriate safeguards such as:
- The UK International Data Transfer Addendum to the EU Standard Contractual Clauses; and/or
- Other lawful transfer mechanisms permitted under UK law.
You can request further details of these safeguards via privacy@builtdynamics.com.
8. Data retention
We retain personal data only for as long as necessary for the purposes set out in this Policy, and to comply with legal, tax or accounting requirements.
Indicative periods (unless a different period is required by law or contractual need):
- Built Query account data: 24 months after last activity or account closure.
- Support tickets & correspondence: 24 months after resolution.
- Web & application logs (security/diagnostics): up to 12 months.
- Contract & billing records: 6 years from the end of the financial year (HMRC).
- Backups: typically 30–90 days rolling.
We may anonymise data for aggregate reporting; anonymised data is not personal data.
9. Security
We apply administrative, technical and organisational measures appropriate to the risk, including encryption in transit & at rest, access controls, environment segregation, least-privilege access, vulnerability management and monitoring. No system is 100% secure; you can help by using strong, unique passwords and keeping credentials confidential.
10. Cookies & analytics
We use cookies and similar technologies to run the site and to measure usage.
- Strictly necessary cookies (e.g., session, security) – these are required for the site to function and do not require consent.
- PostHog – privacy-focused analytics platform used to collect anonymised usage data (e.g., pages visited, time on site, clicks). We configure PostHog to avoid collecting any personally identifiable information.
You can also control cookies in your browser settings, but essential features may not work without required cookies.
11. Your rights
Under UK data protection law, you have the right to:
- Access your personal data;
- Rectify inaccurate data;
- Erase your data (in certain cases);
- Restrict or object to processing;
- Data portability (in certain cases);
- Withdraw consent where processing is based on consent.
To exercise these rights, contact privacy@builtdynamics.com. We may need to verify your identity. We aim to respond within one month.
12. Third-party links
Our Services may contain links to third-party sites or services. We are not responsible for their privacy practices. Please review their policies.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "Effective date" and, where appropriate, notify you through the Services. Please review this page periodically.
14. Contact us
Questions or requests about this Policy or your data rights:
privacy@builtdynamics.com