Privacy Policy

1. Introduction

BuildrLab ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website buildrlab.com and use our services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you consent to the data practices described in this policy.

2. Data Controller

BuildrLab is the data controller responsible for your personal data. For any questions about this privacy policy or our data practices, please contact us at:

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide to us, including:

• Contact Form Submissions: Name, email address, company name, project type, budget range, timeline, and message content when you submit our contact form.
• Newsletter Subscriptions: Email address when you subscribe to our newsletter.
• Customer Reviews: Name, company, role, and review content if you provide a testimonial.
• Account Information: If you create an admin account, we collect your email address and authentication credentials.

3.2 Information from Third-Party Authentication

When you authenticate using Google OAuth, we receive basic profile information including:

• Email address
• Name
• Profile picture (if available)

We only request the minimum permissions necessary for authentication. We do not access your Google contacts, calendar, or other personal data.

3.3 Automatically Collected Information

When you visit our website, we automatically collect:

• Usage Data: Pages visited, time spent on pages, links clicked, and navigation patterns through Google Analytics.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Location Data: Country and city-level location based on IP address (not precise location).
• Cookies: See our Cookie Policy section below.

4. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To respond to your inquiries, process contact form submissions, and communicate about our services.
• Newsletter: To send you marketing communications (only with your consent).
• Website Improvement: To analyze usage patterns and improve our website and services.
• Authentication: To verify your identity and manage admin access.
• Legal Compliance: To comply with applicable laws and regulations.

5. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

• Consent: For newsletter subscriptions and non-essential cookies.
• Contractual Necessity: To respond to your service inquiries and process contact form submissions.
• Legitimate Interests: For website analytics and security measures, where our interests do not override your fundamental rights.
• Legal Obligation: Where required by law.

6. Data Sharing and Third Parties

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our website (e.g., hosting, analytics, email delivery). These providers are contractually bound to protect your data.
• Google Analytics: For website usage analytics. Data is anonymized and aggregated.
• AWS (Amazon Web Services): For cloud hosting and data storage with industry-standard security measures.
• Cloudflare: For security and bot protection services.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

We retain your personal data only as long as necessary:

• Contact Form Data: Retained for up to 3 years after your last interaction with us.
• Newsletter Subscriptions: Until you unsubscribe.
• Account Data: Until you request account deletion.
• Analytics Data: Retained in aggregated form as per Google Analytics retention settings (26 months).

8. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at info@buildrlab.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

Essential Cookies

Required for the website to function properly (e.g., authentication, security). These cannot be disabled.

Analytics Cookies

Used to understand how visitors interact with our website (Google Analytics). These are only set with your consent.

You can manage cookie preferences through our cookie consent banner or your browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Access controls and authentication
• Regular security assessments
• Secure cloud infrastructure (AWS with industry certifications)

While we strive to protect your data, no method of transmission over the internet is 100% secure.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.