Your data, handled with care.

We collect information you provide directly to us — for example, when you fill out our contact form or reach out for services. This includes:

• Name and contact information (email address, phone number)
• Business name and industry
• Messages or inquiries you submit via our contact form
• Your consent preferences, including SMS opt-in status
• Limited website usage data, collected automatically (see Website analytics & cookies)

We measure how people use this website with Umami, an analytics tool we run on our own server. It is built to count visits without identifying you:

• No cookies, and nothing is stored on your device.
• No personal profile. Your IP address is used in the moment to estimate your general location (country, region, and city) and to tell one visit from another, then discarded. It is not saved.
• What it records: pages viewed, the website that sent you here, browser, operating system, device type, page-load speed, and clicks on our phone, email, booking, and contact links.
• The analytics data is stored on a server operated by Builtstead and is used only to produce our website reports. It is not shared with Google or advertisers, not sold, and never used to follow you across other websites.

Cookies. We do not use advertising or analytics cookies, which is why this site has no cookie banner. A few strictly necessary cookies may be set: by Cloudflare, which protects the site from attacks and spam; by our site, to remember whether you have already seen a pop-up; and by WordPress, only if you log in to manage the site. On our contact page, Google reCAPTCHA (described under Information sharing) may also set a cookie to tell people apart from spam bots. You can block or delete cookies in your browser settings; blocking them may affect how some features work.

Do Not Track and Global Privacy Control. Because we don't track visitors across other websites and don't sell or share personal information, our site works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal: there is no cross-site tracking for those signals to turn off. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information.

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Send appointment confirmations, reminders, and follow-ups
• Communicate updates about your automation projects
• Send relevant service announcements and offers (only with your consent)
• Improve our website and service quality
• Comply with legal obligations

Text messages are sent from Builtstead's registered business phone number, and we follow applicable CTIA guidelines and carrier requirements for text-message communications.

We only send SMS messages to individuals who have explicitly opted in. Consent is collected through our website contact form and our online booking page, where you must actively check a box agreeing to receive text messages. The box is never pre-checked.

Your opt-in consent is recorded with a timestamp, where you opted in (contact form or booking page), and the exact consent language displayed at the time. Contact form submissions also record the IP address of the device used. This record is stored securely and is used solely for compliance purposes.

You may withdraw your consent at any time by replying STOP to any text message or by contacting us directly.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these limited circumstances:

• Service providers: trusted third-party vendors who help us operate our business, subject to confidentiality agreements. These include Hostinger, which hosts our servers; Cloudflare, which delivers and protects our website and processes visitor IP addresses to block attacks; Google Workspace, our business email; Quo, our business phone and text-message provider; and Google reCAPTCHA, which protects our contact form from spam and abuse. reCAPTCHA collects hardware and software information (such as device and browser data) and sends it to Google for analysis; its use is subject to Google's Privacy Policy and Terms of Service. Our pages also load a design library from a public content delivery network (unpkg.com), which receives your IP address the way any website you visit does.
• Legal requirements: when required by law, court order, or governmental authority.
• Business transfers: in connection with a merger, acquisition, or sale of business assets, with notice to affected users.

We implement industry-standard security measures to protect your personal information, including encrypted data transmission (HTTPS), secure storage practices, and access controls limiting who can view your data.

While no method of transmission over the internet is 100% secure, we are committed to protecting your information using commercially reasonable means.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Delete your personal information (subject to legal obligations)
• Opt out of SMS communications at any time by replying STOP
• Opt out of email marketing by clicking "unsubscribe" in any email

To exercise any of these rights, contact us at [email protected].

We are based in San Diego, California. If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what personal information we collect, to request access to or deletion of that information, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information.

We do not sell or share your personal information as those terms are defined under California law. You will never be discriminated against for exercising any of your privacy rights. To make a request, email us at [email protected] and we will verify and respond as required by law.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we do, we'll revise the "Last updated" date at the top of this page. Significant changes will be communicated through our website or, where appropriate, directly to you.

If you have questions about this privacy policy or how we handle your data, please reach out. We respond to all privacy-related inquiries within 5 business days.

This privacy policy is provided for general informational purposes and does not constitute legal advice. We recommend having it reviewed by qualified counsel to confirm it meets your specific obligations.