Privacy Policy
Last updated June 2026
This policy explains what personal data InboxBuilder Ltd collects, why we collect it, and the choices and rights you have. It applies to this website and to the work we do for our clients.
Who we are
InboxBuilder Ltd("InboxBuilder", "we", "us") is the data controller for personal data collected through this website. Our registered address is 86-90 Paul Street, London EC2A 4NE, United Kingdom. You can reach us about anything in this policy at hello@inboxbuilder.online.
What we collect
We only collect what we need to answer you and to run our business:
- Information you give us - your name, email address, store website and the details you include when you fill in our audit form or email us.
- Information collected automatically - basic, privacy-respecting analytics such as the pages you view and the device and browser you use, so we can keep the site working well.
- Client data - when we work with you, we may process data inside your email platform on your behalf. In that case you are the controller and we are your processor, under a written agreement.
How we use your information
- To respond to your enquiry and prepare the audit you requested.
- To provide, manage and improve our services to you as a client.
- To send you service-related messages, and marketing only where you have agreed to it.
- To keep our website secure and understand how it is used.
- To meet our legal, accounting and regulatory obligations.
Our legal bases
Under the UK GDPR we rely on: your consent (for example, optional marketing, which you can withdraw at any time); the performance of a contract with you; our legitimate interests in running and promoting our business in a way that does not override your rights; and legal obligation where the law requires us to keep records.
Sharing your information
We do not sell your personal data. We share it only with trusted service providers who help us operate - such as email, analytics and hosting providers - and only under contracts that require them to protect it. We may also disclose data where we are legally required to.
International transfers
Some of our providers are based outside the UK. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent approved mechanisms.
How long we keep it
We keep enquiry details for as long as needed to deal with your request and for a reasonable period afterwards. Client records are kept for the life of the engagement and as long as the law requires after it ends. When data is no longer needed, we delete or anonymise it.
Your rights
Under the UK GDPR you can ask us to:
- access the personal data we hold about you;
- correct it if it is wrong, or complete it if it is incomplete;
- delete it, or restrict how we use it, in certain circumstances;
- port it to another provider; and
- object to processing we carry out on the basis of legitimate interests.
To exercise any of these, email hello@inboxbuilder.online. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Security
We use appropriate technical and organisational measures to protect your data, and we limit access to the people who need it to do their job. No system is completely secure, but we take the safety of your information seriously.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the date at the top of the page, and significant changes will be made clear on this page.
Questions about this policy?
Email us and a real person on the team will get back to you.
hello@inboxbuilder.online