LAST UPDATED 1 April 2026

INTRODUCTION

This page ("Privacy Policy" or "Policy") sets out our policies and procedures for collecting, using and disclosing your information and outlines the security measures we have in place to protect the information you store using BuildMyService, Ltd.'s ("BuildMyService") services, including the services made available through this website, and any other software or services offered by BuildMyService in connection with such services (the "Services"). By using these Services, you consent to the collection, transfer, processing, storage, disclosure and other uses of your information described in this Privacy Policy.

We process your Personal Data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

PERSONAL DATA

When expressing an interest in obtaining additional information about the Services or registering to use the Services, BuildMyService requires you to provide your personal contact information, such as your name, company name, address, phone number and email address ("Personal Contact Information"). When purchasing the Services, BuildMyService also requires you to provide financial and billing information, such as billing name and address, payment card number, and the number of employees within the organisation that will be using the Services ("Billing Information").

DATA, DIAGNOSTIC AND LOGIN INFORMATION

Using BuildMyService's Services, you can create, upload, store and share information such as company description, email IDs, logos, photos, custom emails, user email IDs, and similar ("Data"). This information is stored and maintained on systems operated by BuildMyService and our service providers. If you encounter technical errors using the Services, BuildMyService may request your permission to obtain a crash report and certain logging information from your system documenting the error ("Diagnostic Information"). Such information may include your operating system version, hardware, browser version, and your email address (if provided). Certain login information is maintained in a cookie stored locally on your device to streamline the login process ("Login Information").

ANALYTICS INFORMATION

As you navigate BuildMyService's website and use our Services, BuildMyService may collect information through cookies and web beacons ("Website Navigational Information"). Website Navigational Information includes standard information from your web browser (such as browser type and language), your Internet Protocol ("IP") address, and the actions you take on BuildMyService's website (such as pages viewed and links clicked). Collectively, this is referred to as "Analytics Information."

Third-party vendors, including Google, use cookies to serve advertising based on a user's prior visits to your website or other websites. Google's use of advertising cookies enables it and its partners to serve adverts to your users based on their visits to your sites and/or other sites on the internet. Users may opt out of personalised advertising by visiting Google's Ads Settings, www.youronlinechoices.com/uk/ (the European Interactive Digital Advertising Alliance UK opt-out), or www.aboutads.info.

GEO-LOCATION INFORMATION

BuildMyService does not collect any information regarding your real-time geo-location while using the Services. We will request your express consent before collecting such information in the future.

LAWFUL BASIS FOR PROCESSING

Under UK GDPR, we process your Personal Data on the following lawful bases:

• Contract — Processing is necessary to deliver the Services you have subscribed to (account creation, billing, support, service delivery).

• Legitimate interests — Improving our Services, fraud prevention, direct marketing to existing customers, security monitoring, and analytics. We balance our legitimate interests against your rights and freedoms, and you have the right to object at any time.

• Consent — Marketing communications to non-customers, non-essential cookies, and any other processing where we explicitly ask for your permission. You can withdraw consent at any time.

• Legal obligation — Where we are required by UK law to process your data (e.g. tax, accounting, statutory disclosure requests, anti-fraud obligations).

WHAT DOES BuildMyService DO WITH THE INFORMATION IT COLLECTS?

BuildMyService uses the information it collects in the following ways:

• Personal Contact Information — primarily to administer the Services and provide you with updates and product announcements. We may use some of your information for marketing purposes as explained in this Policy.

• Billing Information — BuildMyService does not store any Billing Information on its servers. We use Stripe (www.stripe.com) to store and process all payment-related transactions. Stripe's privacy policy is available at stripe.com/privacy.

• Data, Diagnostic Information and Login Information — used solely to administer and improve the Services.

• Analytics Information — used in conjunction with analytics services such as Google Analytics to monitor and analyse use of the Services, for technical administration, to improve functionality, and to verify users have authorisation to make requests via the Services.

SHARING AND DISCLOSURE OF PERSONAL DATA

THIRD-PARTY APPLICATIONS AND YOUR USE

BuildMyService provides users with the ability to link their Data to third-party sites such as Facebook, Instagram, and LinkedIn. Such linking is at the complete discretion of users. BuildMyService cannot be held responsible or liable for the linking of user Data to such third-party sites, nor for how those third-party sites use such links.

MARKETING AND PUBLICITY

You agree to permit BuildMyService to identify you as a customer and to use your name and/or logo on BuildMyService's website and in our marketing materials, subject to your right to object at any time.

SALE OF PERSONAL DATA

BuildMyService does not sell, rent, or trade your Personal Data to any third parties.

SERVICE PROVIDERS AND BUSINESS PARTNERS

BuildMyService uses certain trusted third-party companies and individuals to help us provide, analyse, and improve the Services (including data storage, maintenance services, database management, web analytics, payment processing, and improvement of the Services' features). These third parties have access to your information strictly for the purposes of performing these tasks on our behalf and under contractual obligations consistent with this Privacy Policy and UK GDPR.

NON-PRIVATE OR NON-PERSONAL INFORMATION

We may disclose non-private, aggregated, or otherwise non-personal information, such as usage statistics of our Services, at our discretion.

OUR USE AND DISCLOSURE OF PERSONAL DATA

BuildMyService will not disclose any Personal Data about any individual except as set out in this Privacy Policy. This applies to information about our customers and information our customers provide to us about their customers.

We share Personal Data with service providers under contract who help with our business operations such as payment processing, fraud investigation, debt collection, and information management and analytics. If content generation is included in your Services, we may share information with service providers under contract to create, edit, and/or publish such content. These third parties are obligated to protect your information and are contractually prohibited from using your Personal Data for any other purpose. They are not permitted to share your information with any other third parties and are authorised to use your Personal Data only as necessary to provide services to BuildMyService.

We disclose information that we, in good faith, believe is appropriate to cooperate in investigations of fraud or other illegal activity, to investigate violations of our Terms of Use, and to protect our rights and the safety of others. For example, if we conduct a fraud investigation and conclude that one party has engaged in deceptive practices, we reserve the right to provide that party's contact information (but not bank account or payment card information) to victims who request it.

We disclose information in response to a court order, warrant, statutory disclosure request, regulatory request, or other valid legal process under UK law, including requests from private parties in civil proceedings. If a request seeks information about an identified subscriber or limited group of subscribers, we will make reasonable efforts to contact the subscriber(s) before providing information to the requesting party. We cannot guarantee we will always be able to do so, due to time limits, court orders, our inability to contact a subscriber, or other circumstances.

When you sign up for a co-branded version of our service through links to BuildMyService.com from a co-branded partner's website, BuildMyService will share with the co-branded partner your name, email address and physical address to provide enhanced integration between BuildMyService's Services and the partner's services. If you do not want your information shared with our co-branded partner, sign up for BuildMyService directly through BuildMyService.com or sub-domains rather than through a partner link.

We disclose information to your authorised agent or legal representative (such as the holder of a Lasting Power of Attorney that you grant, or a deputy appointed by the Court of Protection).

We share information with companies that provide public relations and marketing services for us. Such information will only be shared to customise, measure, and improve our products, services and advertising. It will not be shared with third parties for their own marketing purposes. These third parties are contractually obligated to protect your information and are prohibited from using your Personal Data for any other purpose.

As with any other business, it is possible that BuildMyService could in future merge with or be acquired by another company. If such an acquisition occurs, the successor company would have access to the information maintained by BuildMyService, including customer account information, but would continue to be bound by this Privacy Policy until amended.

We share your information with our parent, subsidiaries and joint ventures to coordinate the Services we provide to you, enforce our terms and conditions, and promote trust and safety.

The implementation of our Services may, by its nature, require using your Personal Data to locate other information about you. Such use may include searching publicly accessible internet sites and private information databases.

The implementation of our Services may, by its nature, require revealing your Personal Data to third parties to effect removal of internet content about you. For example, we may need to disclose your name to a website to request removal of content. This will only occur with your express permission for a specific, given purpose.

INTERNAL USES OF YOUR PERSONAL DATA

We process your Personal Data using systems operated by BuildMyService and our service providers (including GoHighLevel, Stripe, and Google). Your data may be stored on servers located inside or outside the United Kingdom — see "International Data Transfers" below for safeguards.

We use the information we collect about you in order to:

• develop and deliver our Services

• process your transactions

• provide customer service and manage your account

• improve our products, Services and marketing

• comply with our legal obligations under UK law

We provide access to Personal Data about our users only to those who require it for these purposes.

BuildMyService will not sell or rent any of your Personal Data to third parties. BuildMyService will not share any of your Personal Data with third parties except in the limited circumstances described in this Policy.

INTERNATIONAL DATA TRANSFERS

Where we transfer your Personal Data outside the United Kingdom (for example, to our payment processor Stripe in the United States, to Google for analytics, or to GoHighLevel for CRM and marketing infrastructure), we ensure appropriate safeguards are in place. These include:

• Transfers to countries covered by a UK adequacy decision (including the EU/EEA)

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office

• The UK Extension to the EU-US Data Privacy Framework, where applicable

You can request a copy of these safeguards by contacting us at [email protected].

COOKIES AND TRACKING

We use cookies and similar technologies on our website. Some cookies are essential to the operation of our Services (e.g. login session cookies); others are non-essential and used for analytics, personalisation, and advertising.

Under the Privacy and Electronic Communications Regulations (PECR), we obtain your consent before setting any non-essential cookies. You can manage your cookie preferences at any time via the cookie banner on our website or your browser settings.

CHILDREN'S PRIVACY

Our Services are not directed at children under 13, and we do not knowingly collect Personal Data from children under 13. If you believe a child has provided us with Personal Data, please contact us at [email protected] and we will delete it.

DATA RETENTION

We will retain your Personal Data for as long as your account is active, or as needed to provide you the Services. If you wish to cancel your account or request that we no longer use your information to provide you the Services, you may delete your account by contacting BuildMyService's customer care team. Once your account is deleted, your Data will no longer be stored in our active systems. While we work to delete your Data from our systems as quickly as possible, please note there may be a delay between your deletion request and full removal, and some Data may continue to exist for a period in backup copies.

We may retain certain information for longer where we are required to do so by law (e.g. financial records, tax records) or for the establishment, exercise, or defence of legal claims.

YOUR RIGHTS UNDER UK GDPR

As a UK business, we process your Personal Data in accordance with the UK GDPR and the Data

Protection Act 2018. You have the following rights regarding your Personal Data:

• Right of access — request a copy of the data we hold about you (Subject Access Request).

• Right to rectification — correct inaccurate or incomplete data.

• Right to erasure — request deletion of your data ("right to be forgotten").

• Right to restriction — limit how we process your data.

• Right to data portability — receive your data in a structured, commonly used, machine-readable format.

• Right to object — object to processing based on legitimate interests or for direct marketing.

• Rights related to automated decision-making and profiling — including the right not to be subject to a decision based solely on automated processing.

• Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact us at [email protected] or by post at the address below. We will respond within one calendar month. There is no fee for most requests, although we may charge a reasonable fee for excessive or repetitive requests as permitted by UK GDPR.

If you reside in the EU, EEA, or Switzerland, you may have additional rights under EU GDPR or your local data protection law. We will honour those rights as required.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or 0303 123 1113, if you believe we have not handled your data properly.

CHANGES TO PRIVACY POLICY

If we decide to make material changes to our Privacy Policy, we will notify you by email through the primary email address associated with your account and/or post those changes to this Privacy Policy on the website homepage prior to the changes taking effect. You are responsible for ensuring we have an up-to-date and deliverable email address for you.

You are also responsible for regularly reviewing this Privacy Policy and related documents. We reserve the right to modify this Privacy Policy at any time. No amendment to or modification of this Policy will be binding unless in writing and signed by a duly authorised representative of BuildMyService, or posted to the site by a duly authorised representative of BuildMyService.

In the event that BuildMyService undergoes a business transition, such as a merger, an acquisition by another company, or a sale of a portion of its assets, users' Personal Data will, in most instances, be part of the assets transferred. Users will be notified via prominent notice on the site for 30 days following any change of ownership or control of their Personal Data. If, as a result of the business transition, a user's Personal Data will be used in a manner materially different from that stated at the time of collection, users will be given a choice consistent with this section.

COMMUNITY

Our Services may include publicly accessible community features such as blogs, forums, and wikis. Please be aware that any information you provide in these areas may be read, collected, and used by others who access them. Your posts may remain after you cancel your account.

QUESTIONS, COMPLAINTS AND CONTACTS

If you have any questions regarding this Privacy Policy, please contact us at [email protected], or by post at the address below:

BuildMyService, Ltd.

Attn: Privacy Officer

White Gables

Penzance, Cornwall

United Kingdom

You may also contact the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk

• Telephone: 0303 123 1113

• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF