Privacy Policy
Last updated: 12 July 2026. This Privacy Policy explains how Build Actions Ltd ("Build Actions", "we", "us", "our") collects, uses, shares, and protects personal data when you visit buildactions.co.uk or buildactions.com (the "Website") or engage us for consultancy or development services. We are committed to complying with the UK GDPR, the EU GDPR (for EU visitors), the UK Privacy and Electronic Communications Regulations (PECR), and the UK Data Protection Act 2018. This policy covers the Website and our consultancy business only — our own products, such as Onefolio, have their own separate privacy policy covering their users' data (see getonefolio.com/privacy).
1. Who We Are
Build Actions Ltd is the data controller for the personal data described in this policy.
2. What Data We Collect
Contact/enquiry data: if you email us or use a contact link on the Website, we collect whatever you send us — typically your name, email address, and the content of your message.
Client/engagement data: if you become a client, we collect the business and contact details needed to deliver and invoice a consultancy or development engagement, as set out in the relevant proposal or SOW.
Website analytics data: aggregate, non-identifying usage data via Google Analytics 4 (device, browser, approximate location, on-site behaviour) — only collected once you consent via our cookie banner (see Section 6).
3. How and Why We Use Your Data (Lawful Basis)
Responding to your enquiry and, where applicable, delivering and invoicing an engagement — contract necessity or legitimate interest (UK/EU GDPR Art. 6(1)(b)/(f)).
Website analytics (GA4) — your consent (Art. 6(1)(a)), collected via our cookie banner, and PECR consent for the underlying non-essential cookies.
4. Who We Share Data With
We do not sell your personal data. We share data only with: hosting/infrastructure providers, to run the Website; Google, as our analytics processor (only if you consent to analytics cookies); and law enforcement or regulators where required by law.
5. Data Retention
Enquiry data is retained for as long as reasonably needed to respond to you, and then deleted or anonymised, typically within 12 months. Client/engagement data is retained for the duration of the engagement plus any period required for legal, tax, or accounting purposes (typically up to 6 years for financial records, per UK requirements). Analytics data is retained according to Google Analytics' configured retention window (typically 14 months).
6. Cookies
The Website uses Google Analytics 4 (gtag.js), a cookie-based analytics tool, to understand how visitors use the Website. Under UK PECR, we only set these cookies with your consent — when you first visit, a cookie banner asks you to Accept or Reject analytics cookies. If you reject, GA4 is never loaded and no analytics cookies are set. Your choice is stored in your browser's local storage so we remember it on future visits.
You can change your choice at any time using the "Cookie preferences" link in the site footer, which reopens the banner. Strictly necessary cookies/local storage (e.g. to remember your cookie preference itself) do not require consent, as they are necessary for the Website to function.
7. Your Rights Under GDPR
You have the right to access, rectify, erase, port, object to, or restrict processing of your personal data, and to withdraw consent at any time for consent-based processing (e.g. analytics cookies). To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
8. International Data Transfers
Where a provider (such as Google) processes data outside the UK/EEA, that provider relies on its own approved transfer mechanism (such as Standard Contractual Clauses or an adequacy decision).
9. Children's Privacy
The Website is a business website, not intended for and not knowingly collecting data from individuals under 16.
10. Changes to This Policy
We may update this Privacy Policy from time to time; the "Last updated" date above reflects the most recent version.
11. Contact Information
Build Actions Ltd
Company number: 13333702
Registered office: Unit Da2 Sutherland House, 43 Sutherland Road, London, United Kingdom, E17 6BU
Email: [email protected]
You may also lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).