Legal

Privacy policy.

The short version: we only collect what you give us through the contact form, we use it to reply to you, and we don't sell it or run tracking on you. The full version is below.

Last updated: 15 July 2026

Who we are

Built by Boot is a web design studio based in Greater Manchester, United Kingdom. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Built by Boot is the data controller for the personal data described in this policy.

Contact for anything data-related: contact@builtbyboot.co.uk.

What we collect and why

The only personal data this website collects is what you choose to send us through the contact form:

  • Your name and, optionally, your business name
  • Your email address and, optionally, your phone number
  • What you need and the message you write

We use this solely to read and reply to your enquiry, and, if you become a client, to carry out the work you've asked for. Our lawful basis is legitimate interest (responding to an enquiry you initiated) and, where we go on to work together, performance of a contract.

Most form submissions (enquiries, audit requests and guide downloads) are delivered straight to us by email and are not stored in a database on this website.

The content intake form at /intake works differently, because it collects the material we need to build your site — including your logo and photos. It is processed by Basin (Cornerstone Software Inc., United States), who receive and store those submissions and files on our behalf so we can download them. Files stay there until we have your site built and are then removed. If you would rather not use it, email us and we will take your content another way.

Cookies and analytics

Nothing loads until you choose. We use Google Analytics 4 to see which pages people find useful, and it loads only if you press “Accept” on our cookie banner. Choose “Essential only”, or ignore the banner, and no analytics script is ever requested and no analytics cookies are set. We run no advertising trackers, no Meta Pixel and no fingerprinting.

If you do accept, Google Analytics sets cookies on your device and receives your IP address and basic details about your visit (pages viewed, approximate location, device and browser). Google acts as our processor for this, and may transfer data outside the UK. Our lawful basis is your consent, which you can withdraw at any time by clearing this site’s data in your browser — the banner will then ask you again.

Two smaller technical points, in the interest of full transparency:

  • Whichever choice you make on the cookie banner is saved in your browser’s local storage (a single value on your own device) so we don’t ask you again. That happens whether you accept or decline.
  • Our fonts are served from our own server, not from Google Fonts or any other third party. If you have not accepted analytics, loading a page on this site does not send your IP address to anyone but our host.

Hosting and server logs

This website is hosted by Hostinger. Like almost all web hosts, Hostinger's servers keep standard access logs (IP address, pages requested, browser type, timestamps) for security and operational purposes. We don't use these logs to identify individual visitors.

How long we keep your data

Enquiry emails are kept for up to 24 months from your last contact with us, so we have context if you come back to us, and are then deleted. If you become a client, we keep project correspondence for as long as needed to deliver and support the work, and financial records for as long as UK tax law requires (currently six years).

Who we share it with

Only the service providers who make the website, our forms and our email work, each acting on our instructions, or where the law requires it. We never sell personal data. Currently that is:

  • Hostinger — hosting and email
  • Basin (Cornerstone Software Inc., United States) — the content intake form and its file uploads
  • Google — Analytics, and only for visitors who accept the cookie banner

Basin and Google are based outside the UK, so using them involves an international transfer of data. Both rely on the standard safeguards permitted under UK GDPR for those transfers.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct it if it's wrong
  • Have it erased ("right to be forgotten")
  • Restrict or object to how we use it
  • Receive a copy in a portable format

To exercise any of these, email contact@builtbyboot.co.uk. We'll respond within one calendar month. If you're not happy with how we handle your data, you can complain to the UK's Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change how this site handles personal data (for example, if we add analytics), we'll update this page and the "last updated" date above.