Privacy Policy

1. Who we are

We Build You Scale builds and maintains websites for trades and service businesses, and runs an automated Google review service alongside them. The service is operated by Tom Riley.

For anything in this policy, including any request about your data, contact tomrileyseo@gmail.com.

We are the data controller for the personal data described below. Where we build and host a website for a client, and that website collects enquiries from their customers, our client is the controller of that data and we act as their processor.

2. What we collect

When you book a call. Your name, business name, email address and phone number, along with the date and time you chose. You give us this directly through the booking form.

When you email us. Whatever you put in the message, and your email address.

When you use the site. Standard technical information your browser sends: IP address, browser type and version, device type, the pages you visited and the site or advert you arrived from. This is collected through our hosting provider and through the advertising tools described below.

We do not ask for and do not want payment card details through this website. We never knowingly collect data from anyone under 18.

3. Why we use it, and our lawful basis

To hold and run your discovery call — to put the appointment in the diary, send you the confirmation, the reminder 24 hours before and the reminder 30 minutes before. Lawful basis: taking steps at your request before entering a contract.

To reply to you and to answer questions about the service. Lawful basis: legitimate interests, namely responding to people who contact us.

To provide the service if you become a client — building the site, making changes, running the review system, and taking payment. Lawful basis: performance of a contract.

To measure and improve our advertising — understanding which adverts lead to bookings. Lawful basis: consent where required, otherwise legitimate interests in running our business efficiently.

To meet legal and accounting obligations. Lawful basis: legal obligation.

4. Cookies and advertising tools

This site uses the Meta pixel, a piece of code from Meta Platforms (Facebook and Instagram). It tells us when someone who saw one of our adverts visits the site or books a call, so we can tell which adverts are working and stop paying for ones that are not. It sets cookies in your browser and shares an identifier with Meta.

We do not use the pixel to build profiles about you beyond that, and we do not sell your data to anyone.

You can stop this in several ways: change your ad preferences at facebook.com/adpreferences, block or delete cookies in your browser settings, or use your browser's tracking protection. Blocking these cookies will not stop you using the site or booking a call.

Our hosting provider also sets essential cookies needed to serve and secure the site. These cannot be turned off without breaking it.

5. Who we share it with

We do not sell your personal data. We share it only with the suppliers who make the service work:

• Vercel — hosts this website and processes the requests your browser makes to it.
• Resend — sends your booking confirmation and reminder emails.
• Google — your appointment is stored in a Google Calendar, and we use Google's services for email.
• Meta Platforms — receives advertising measurement data as described above.

We may also share data with our accountant, or with a professional adviser, and with law enforcement or a regulator where we are legally required to.

Some of these suppliers are based in the United States, so your data may be transferred outside the UK. Where that happens we rely on the safeguards those providers have in place, such as the UK International Data Transfer Addendum and, where applicable, the UK extension to the EU-US Data Privacy Framework.

6. How long we keep it

Booking and enquiry details are kept for up to 24 months from your last contact with us, so we can pick up a conversation where it left off. If you become a client, we keep your details for the length of our working relationship and for 6 years afterwards, which is the period we need for tax and accounting purposes.

Advertising and analytics data is kept for the retention period set by the provider concerned.

You can ask us to delete your data sooner. See below.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we use it, including objecting to direct marketing at any time
• receive your data in a portable format
• withdraw consent, where we relied on consent, without affecting anything done beforehand

Email tomrileyseo@gmail.com and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

8. Keeping it safe

The site is served over HTTPS. Access to booking data is restricted to Tom Riley, and the suppliers listed above hold their own security certifications. No system is perfectly secure, but we take reasonable and proportionate steps to protect what we hold and we will tell you and the ICO about a breach where the law requires it.

9. Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. Material changes affecting you will be notified by email where we hold your address.