This explains what personal data buildkitly.com collects, why, who receives it and what rights you have. BuildKitly (we, us) is the controller. Contact: support@buildkitly.com.
1. What we collect and why
- Order data: name, email, country, items, order number and status (we receive these from Lemon Squeezy; we never receive your card details). Why: deliver your order, send receipts and download links, support, accounting and tax. Legal basis: contract; legal obligation.
- Account data: name, email, password (stored hashed), your reviews and order history. Why: let you sign in, download, track orders and review themes. Legal basis: contract.
- Enquiries and support requests: name, email, category, message, attachments. Why: answer you and scope work. Legal basis: legitimate interest; contract.
- Chat messages: what you type in the site assistant and contact options. Why: answer questions; we may be alerted when a conversation is a sales or support request. Legal basis: legitimate interest.
- Newsletter email (only if you opt in). Why: send the newsletter. Legal basis: consent.
- Reviews: your rating, text and chosen display name. Why: show verified-buyer reviews. Legal basis: contract; legitimate interest.
- Technical data: IP address, browser, pages requested. Why: secure the site, prevent abuse, rate-limit logins and forms. Legal basis: legitimate interest.
- Usage statistics: page views, referrer, browser and device type, country (no cookies, no personal data). Why: understand how the site is used. Legal basis: legitimate interest.
We do not sell your data and do not use it for third-party advertising.
2. Who we share it with
- Lemon Squeezy (payments, taxes, receipts, refunds): the merchant of record for your purchase, under its own privacy policy.
- Cloudflare: delivers and protects the site; processes request data such as IP address.
- Our hosting and email providers: our hosting provider (Contabo) and our own mail server, which store and send our data.
- Anthropic (AI assistant): messages you type into the site assistant are sent to Anthropic to generate replies. Do not enter sensitive personal data in the chat.
- Telegram: we may receive internal alerts about chat requests through Telegram; these can include the message text.
- Umami (analytics): a privacy-friendly analytics tool that we host ourselves on our own server in the EU. It uses no cookies, does not track you across other websites and collects no personal data; no data is shared with the vendor.
- We also disclose data where the law requires it, and to protect our rights.
3. International transfers
Some providers are outside the EU/EEA (for example Lemon Squeezy, Anthropic, Cloudflare, Telegram). Where data is transferred, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s certification.
4. How long we keep data
- Order and tax records: kept as long as the law requires for accounting and tax (typically up to 7 years).
- Accounts: until you delete the account or ask us to.
- Enquiries and support: up to 24 months after the last contact.
- Chat logs and messages sent to our team through the chat: up to 30 days.
- Newsletter: until you unsubscribe.
- Server and security logs: up to 90 days.
- Reviews: until you delete them or your account.
5. Cookies and local storage
We use only strictly necessary cookies and browser storage: shopping cart and session, login, security/rate-limit, and your preferences (dark/light theme, favourites, comparison list, which stay on your device). Our analytics uses no cookies. Lemon Squeezy’s payment window may set its own cookies. See the Cookie Policy.
6. Your rights
Depending on where you live you can ask us to access, correct, delete or export your data, to restrict or object to certain processing, to withdraw consent, and to complain to your data protection authority. To use these rights email support@buildkitly.com; we reply within 30 days. You can delete your reviews and your account from My account; deleting the account also removes your reviews. Order records that we must keep by law are retained.
7. Security
We use HTTPS, hashed passwords, access limits, rate limiting on sign-in and forms, backups and monitoring. No system is perfectly secure; tell us right away if you suspect a problem.
8. Children
The site is for people aged 16 and over. We do not knowingly collect data from children.
9. Changes
We will post updates here with a new “Last updated” date. See also our Terms of Service, Refund Policy and Delivery Policy.
10. Contact
BuildKitly · support@buildkitly.com