What this site collects, and what it does not.

Who is responsible

BuildBox.to is the data controller for anything you send through this site. Post: Unit 3C, Avonbeg Industrial Estate, Longmile Road, Dublin 12, D12 C596, Ireland. Email: dev@buildbox.to.

No cookies, no analytics

This site sets no cookies of any kind. There is no analytics, no tracking pixel, no advertising network, and no session recording. Nothing is embedded from another domain — the fonts are served from this site rather than from a font network, so simply reading these pages sends your data nowhere. That is also why you were not asked to accept anything when you arrived: there is nothing to consent to.

The contact form

The contact form is the one place this site collects personal data. If you use it, the following is processed:

• Your name and email address, which are required
• Your phone number, if you choose to give it
• The project type you select, and how you heard about BuildBox, if you answer
• Whatever you write in the message field
• Technical metadata attached by the form provider, including your IP address, a timestamp, and the page you submitted from

Purpose and lawful basis. The only purpose is to read your enquiry and reply to it. The lawful basis is legitimate interests — you contacted a business expecting a response, and answering you is the obvious use of what you sent. Your details are never used for marketing, never added to a mailing list, and never sold or shared for anyone else’s purposes.

Where it goes

The form is handled by Web3Forms, operated by Web3Creative, which acts as a data processor under a data processing agreement. Web3Creative operates from India, and the submission is processed on infrastructure provided by Amazon Web Services, Cloudflare, and Hetzner. Your IP address and email address are also passed to the spam-prevention services CleanTalk and Akismet, both of which operate in the United States.

Where that involves transferring your data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses.

The enquiry is then delivered by email to dev@buildbox.to, which is where it is actually read and answered.

How long it is kept

Your enquiry stays in the BuildBox inbox for as long as it is useful to the conversation it belongs to, and is deleted when it is no longer needed. If you ask for it to be deleted sooner, it is.

Separately, the form provider retains submission data on its own systems for up to three years from the date of submission, after which it is deleted automatically. That retention is the provider’s, not something this site controls — but you should know it exists, because it means deleting an email from the inbox is not the same as the data being gone everywhere.

Your rights

Under the GDPR you have the right to:

• Ask for a copy of the personal data held about you
• Have inaccurate data corrected, or incomplete data completed
• Have your data erased
• Ask that processing be restricted
• Object to processing carried out on the basis of legitimate interests
• Receive your data in a portable form, or have it transferred elsewhere

To exercise any of these, email dev@buildbox.to. There is no charge and no form to fill in. You will get a reply within one month, usually a great deal sooner.

If you are unhappy

You can complain to the Irish supervisory authority, the Data Protection Commission, at dataprotection.ie. You are entitled to do that whether or not you raise it with me first, though raising it first is usually faster.

Changes

If this notice changes, the updated version appears here. Any change that affects how your data is handled will be reflected before it takes effect, not afterwards.