BuiltByAL Privacy Policy

Last updated: 26 August 2026

1. Who we are

BuiltByAL is operated by Alex Limbrick, trading as BuiltByAL, a sole trader based in the United Kingdom.

For personal information that BuiltByAL collects and uses for its own business purposes, Alex Limbrick trading as BuiltByAL is the data controller.

You can contact BuiltByAL by email at hello@builtbyal.co.uk (see the Contact section at the end of this policy).

2. What this policy covers

This Privacy Policy explains how BuiltByAL handles personal information relating to:

  • visitors to the BuiltByAL website;
  • people who request a Website Preview or make an enquiry;
  • prospective clients and business contacts;
  • clients;
  • suppliers and other people who communicate with BuiltByAL.

Where BuiltByAL processes information solely on behalf of one of its website clients, the client may instead be the data controller and separate data-processing terms may apply.

3. Information we may collect

The information we collect depends on how you interact with BuiltByAL.

Website Preview and enquiry information

The Website Preview form may collect:

Required information

  • your name;
  • business name;
  • email address.

Optional information

  • phone number;
  • information you choose to include in your message.

The form is intended to collect only information reasonably necessary to understand and respond to your request.

Please do not provide sensitive or special-category personal information through the enquiry form unless it is genuinely necessary and BuiltByAL has specifically requested it.

Technical information

When you use the website or submit a form, technical information may also be processed by the website, hosting, security or form providers.

This may include:

  • IP address;
  • submission time;
  • browser or device information;
  • referring page;
  • security and anti-spam information.

Client information

If you become a client, BuiltByAL may also process information needed to manage and deliver the project, including:

  • contact details;
  • correspondence;
  • project requirements;
  • business information;
  • website content and assets;
  • approvals and revision records;
  • invoices and payment records;
  • domain, hosting and account information where relevant;
  • support and Care Plan records.

Prospect information obtained from public sources

BuiltByAL may research established businesses that appear to have a genuine potential need for its services.

Where this involves personal information about an identifiable business owner or contact, information may come from publicly accessible business sources such as:

  • business websites;
  • public business profiles;
  • trade directories;
  • professional listings;
  • social media pages;
  • other legitimate public sources.

Only information reasonably relevant to assessing or contacting the business should be collected.

4. Why we use personal information

Responding to enquiries and Website Preview requests

We use enquiry information to:

  • understand your business and request;
  • respond to you;
  • prepare or discuss a Website Preview;
  • arrange a conversation where appropriate;
  • provide information about BuiltByAL services;
  • take steps towards a possible project.

Depending on the circumstances, the lawful basis may be:

  • legitimate interests, where processing is reasonably necessary to respond to and manage genuine business enquiries; or
  • contract, where processing is necessary to take steps at an individual’s request before entering into a contract or to perform a contract with that individual.

Delivering client projects

We use client information to:

  • agree and manage project scope;
  • build and deliver websites;
  • communicate with clients;
  • manage revisions and approvals;
  • provide hosting and support where agreed;
  • issue and manage invoices;
  • maintain appropriate project records.

The lawful basis may include contract, legitimate interests and legal obligation depending on the particular processing.

We may process information where necessary for:

  • accounting and tax records;
  • protecting legal rights;
  • responding to disputes or complaints;
  • maintaining appropriate business records;
  • preventing fraud or misuse;
  • protecting our websites and systems;
  • complying with legal or regulatory obligations.

The lawful bases may include legal obligation and legitimate interests.

Prospect research and business outreach

BuiltByAL may use relevant publicly available business contact information to identify and contact businesses that appear reasonably likely to benefit from its services.

The lawful basis for processing personal information for this purpose will generally be legitimate interests where that basis is appropriate.

Any direct marketing activity must also comply with applicable electronic and telephone marketing rules.

BuiltByAL carries out required contact-preference checks before governed cold-calling activity.

5. Direct marketing and your right to object

You have the right to object at any time to your personal information being used for direct marketing.

If you tell BuiltByAL that you do not want to receive marketing or sales contact, we will stop using your information for that purpose.

We may retain the minimum information necessary on a suppression or “do not contact” record so that your preference continues to be respected.

6. Website forms and Web3Forms

The BuiltByAL Website Preview form uses Web3Forms, operated by Web3Creative, to process and deliver form submissions.

When you submit the form, the information entered into it is sent through Web3Forms so that it can be delivered to BuiltByAL.

Technical information associated with a submission may also be processed where necessary for delivery, security and spam prevention.

Web3Forms may use third-party infrastructure and subprocessors to provide its service.

BuiltByAL keeps the provider’s applicable privacy and data-processing arrangements under review.

BuiltByAL retention policy for Web3Forms

Where the functionality available to BuiltByAL allows it, BuiltByAL will delete the Web3Forms-held copy of a Website Preview submission once successful delivery has been confirmed and the copy is no longer required there.

The target maximum retention period within Web3Forms is 30 days after submission.

The copy retained by BuiltByAL itself will follow the retention periods described in this policy.

7. Spam protection

The Website Preview form may use hCaptcha or another approved security mechanism to reduce automated spam and abuse.

Spam-protection services may process technical information necessary to determine whether a submission is being made by a genuine user rather than an automated system.

Any cookies or similar storage technologies associated with the website and its security tools are addressed separately in the BuiltByAL Cookie Policy.

8. Who we share information with

BuiltByAL does not disclose personal information unnecessarily.

Information may be shared with service providers where reasonably necessary to operate the business or deliver the requested service.

These may include:

  • website and infrastructure providers;
  • form-processing providers;
  • spam and security providers;
  • the BuiltByAL email provider;
  • hosting and domain providers;
  • accounting, payment or professional service providers where relevant;
  • authorities or regulators where disclosure is legally required.

Service providers should receive only the information reasonably necessary for the service they provide.

BuiltByAL does not sell personal information.

9. International processing

Some service providers used by BuiltByAL may process personal information outside the United Kingdom.

Where personal information is transferred internationally, BuiltByAL will take reasonable steps to ensure that an appropriate lawful transfer mechanism or safeguard applies where required by UK data-protection law.

Provider arrangements are kept under review, including where material changes occur.

10. How long we keep information

BuiltByAL keeps personal information only for as long as it is reasonably required for the reason it was collected, or where longer retention is required or justified by law.

Enquiries that do not become clients

Website Preview requests, enquiry correspondence and associated contact information will normally be deleted 12 months after the last meaningful contact, unless there is a legitimate reason to retain it for longer.

Web3Forms submission copies

Where the functionality available to BuiltByAL allows it, the Web3Forms-held submission will normally be deleted within 30 days, after successful delivery has been confirmed and where it is no longer required there.

Prospect research

Prospect information will be reviewed and removed when it is no longer reasonably relevant or accurate.

Where someone objects to direct marketing, BuiltByAL may retain the minimum information required on a suppression record so that their preference continues to be respected.

Client and project information

Information required to deliver an active project will be retained for the duration of the client relationship.

Core contractual and project records may then be retained for an appropriate period after completion where reasonably necessary for:

  • accounting;
  • legal obligations;
  • contractual records;
  • resolving disputes;
  • protecting legal rights.

Financial and tax records

Financial and tax records will be retained for the period required by applicable UK law and HMRC requirements.

Information may be deleted earlier where there is no longer a valid reason to keep it.

11. Security

BuiltByAL takes reasonable organisational and technical steps to protect personal information against:

  • unauthorised access;
  • loss;
  • misuse;
  • alteration;
  • disclosure.

Access to business and client information should be limited to authorised people and systems that genuinely require it.

Third-party services are selected with security and privacy considerations in mind.

No internet-based service can guarantee absolute security.

12. Your data-protection rights

Depending on the circumstances and the lawful basis being used, you may have rights including:

  • access to personal information held about you;
  • correction of inaccurate information;
  • erasure of information in certain circumstances;
  • restriction of processing in certain circumstances;
  • objection to certain processing;
  • data portability in certain circumstances;
  • withdrawal of consent where processing relies on consent.

These rights do not all apply in every situation.

You have an absolute right to object to your personal information being used for direct marketing.

To exercise these rights, you can contact BuiltByAL by email at hello@builtbyal.co.uk.

13. Automated decision-making

BuiltByAL does not use solely automated decision-making that produces legal or similarly significant effects on individuals.

Technology may assist with activities such as spam prevention or operational organisation, but material business decisions remain subject to human judgement and approval.

14. Cookies and similar technologies

The website may use cookies or similar storage technologies where needed for:

  • website functionality;
  • security;
  • approved analytics or other approved purposes.

The technologies actually used, their purposes and any applicable consent requirements will be explained in the separate BuiltByAL Cookie Policy.

BuiltByAL will not introduce advertising or behavioural tracking without first reviewing the privacy and consent requirements.

15. Complaints

If you have concerns about how BuiltByAL handles your personal information, you should contact BuiltByAL so that the issue can be investigated.

You can contact BuiltByAL by email at hello@builtbyal.co.uk.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.

16. Changes to this policy

This Privacy Policy may be updated when:

  • the website changes;
  • a new service or provider is introduced;
  • BuiltByAL changes how personal information is used;
  • legal or regulatory requirements change;
  • the structure of the business changes.

Material changes will be reflected by updating the date shown at the top of this policy.

17. Contact

You can contact BuiltByAL by email at hello@builtbyal.co.uk.