Privacy notice

This notice explains what personal information the Built by GS website (builtbygs.com) collects, why, and what you can do about it. It’s short because the site collects very little.

Who we are

Built by GS is run by Garfield Stephens Ltd, a company registered in England and Wales (company number 09468745). Our registered office is 203 Clarence Road, Sutton Coldfield B74 4LE. We’re registered with the Information Commissioner’s Office (ICO), registration number ZA652240. Garfield Stephens Ltd is responsible (the “controller”) for personal information collected through this website.

What we collect

If you use the Say hi form

We collect your name, your email address and your message to handle your enquiry and related follow-up. Our delivery services also process this information to deliver messages and protect the service from abuse. The form uses Resend, an email delivery service, to pass your message to our business inbox on our behalf. Our business email provider processes messages in that inbox. We do not add you to a marketing list.

When you visit the site

Like almost every website, our hosting provider (Vercel) automatically processes technical information when pages are requested — such as your IP address, browser type and the page you asked for — to deliver the site and keep it secure.

Protected review versions use Vercel Authentication to restrict access. Vercel handles the sign-in and uses an authentication cookie to remember access to the review. This is separate from the website’s contact form and is not visitor analytics.

To limit spam, the form also uses your IP address and submission timing. Rate-limit information is held in server memory. We do not save messages in a website database.

We don’t use analytics, advertising or tracking cookies, and there are no third-party trackers on this site.

Links to other websites

Some projects link to their own websites. Those sites are separate and have their own privacy notices.

Our lawful basis

We handle messages you send us on the basis of our legitimate interest in replying to people who get in touch. Technical information is processed on the basis of our legitimate interest in running a secure website.

Who sees it

We don’t sell your information or use it for marketing. We use Vercel to host and secure this website. Our email delivery and business email providers also process contact messages on our behalf. These providers may use other service providers to operate their services.

International processing

Information may be processed outside the UK, including in the United States. Vercel’s data-processing terms include Standard Contractual Clauses and a UK transfer addendum, which provide safeguards for relevant international transfers. You can read those safeguards through the linked terms.

Resend stores message content and delivery records in the United States. Our Ireland sending region determines where email is sent from; it does not move stored data to Ireland. Resend’s data-processing terms include Standard Contractual Clauses and the UK Addendum. Its data protection information explains these safeguards and how it stores and retains email data.

How long we keep it

Messages are delivered to our business inbox. We keep enquiries while handling them and for any necessary follow-up, then delete them unless a legal obligation or dispute requires us to keep them longer. Email and hosting providers also apply their own service retention settings.

Under our current Resend plan, email content and delivery logs are retained for 30 days. Resend’s backups are retained for seven days. These periods are separate from the copies delivered to our business inbox. See Resend’s retention details.

Your rights

You can ask for a copy of the personal information we hold about you, and ask us to correct or delete it, restrict how we use it, or object to us using it. To do any of this, use the Say hi page or write to us at our registered office.

If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change how the site uses personal information, we’ll update this page and the date at the top.