Privacy policy

Version 2026-09-04.1. Controller: Kindell Studios ([legal entity name, address – to be completed by Harvey]), contact buildit@kindellstudios.com.

What we collect

Design images you (or your assistant) send us; the brief we derive from them; your answers about the room; your postcode; your name, email address and phone number when you ask us to request quotes; the name of the assistant you used; and click records on our hand-off links (partner, request id, hashed destination, hashed user agent).

Why, and on what basis

To produce a brief and pass it, with your contact details, to the trade platforms you select – performed on the basis of your explicit consent, given when you agree to the consent text naming those partners. We keep a record of that consent (version, text hash, partners, time). We do not use your data for our own marketing.

Who receives it

Only the partners you named at consent time, from: Bark, Checkatrade, Rated People. Each is an independent controller once they receive the job; their trades may call, text or email you. We do not sell data to anyone else. Sub-processors: Cloudflare (hosting, storage, UK/EU), Anthropic (image analysis – images are processed, not retained for training), Resend (email).

Referral fees

Some of our hand-off links may earn BuildIt a referral fee, on terms set by each partner; others earn nothing at all. Each link says which it is at the point you are about to follow it. This never changes which partners you are offered or their order (always alphabetical), and we never show you a price that did not come from a trade.

Retention

Requests, images and contact details: 90 days, then deleted automatically. Consent records: 24 months. Click logs: 24 months, hashed. All three are enforced by an automatic job, not by hand.

It runs nightly on a schedule. It last ran on 02 Nov 2026.

Your rights

Delete your request and all personal data at any time from your tracking link, or email us. You also have rights of access, rectification, restriction, portability and to complain to the ICO (ico.org.uk). To withdraw a job a partner already holds, contact that partner directly – we tell you who they are on your tracking page.

Security

Contact details and full postcode are encrypted at rest (AES-256-GCM); transport is TLS; images are served only via signed links.