Contents
1. Who We Are and Scope
BLD Technology Co., trading as BLDTechCo, is the controller of personal information collected through bldtechco.com and continuity.bldtechco.com (together, “this website”) and through direct correspondence with us. We operate from Port Washington, New York. Formation of a limited liability company is in progress; until it completes, the founders operating the business are jointly responsible for the commitments in this policy.
This policy explains what we collect, why, who we share it with, how long we keep it, and your rights under the EU and UK GDPR, the CCPA as amended by the CPRA, and other applicable US state privacy laws.
2. What We Collect
2.1 What you give us
When you use the contact form on our Contact page, we collect your name, your email address, the topic you choose, and your message, plus your business name and phone number if you choose to give them. When you email or call us directly, we collect whatever you choose to send: typically your name, business name, email address, phone number, and what you tell us about your enquiry. We keep records of that correspondence.
There is no account area and no newsletter sign-up on this website.
2.2 What we collect automatically
Standard server logs from our hosting provider: IP address, browser type and version, operating system, referring page, pages viewed, and date and time. Plus the cookie in Section 6, only where you consent.
2.3 What we do not collect
We do not request or process special categories of personal data — racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or sexual orientation — or “sensitive personal information” as defined under US state law.
3. How We Use It
- To respond to enquiries and provide what you ask for;
- To prepare quotes, proposals, statements of work and invoices;
- To deliver and support active engagements;
- To comply with legal obligations and enforce our agreements;
- To detect and prevent fraud, security incidents and technical problems;
- To understand aggregate website usage — only where you consented to the analytics cookie.
We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. We do not send marketing without explicit opt-in consent.
4. Legal Bases (GDPR)
If you are in the EU, UK, EEA or Switzerland we rely on: performance of a contract, to provide services you requested or are negotiating; legitimate interests, to operate and secure the website and respond to enquiries, balanced against your rights; consent, for non-essential cookies and any future marketing, withdrawable at any time; and legal obligation, for tax, accounting and regulatory requirements.
5. Sharing and Third Parties
We do not sell or rent personal information. We share it only with service providers acting under contract on our instructions — Netlify, which hosts this website and receives and stores contact-form submissions; Squarespace, which forwards any email sent to an @bldtechco.com address; Google, which provides the email inboxes those submissions and your emails are delivered to; and our cloud storage, accounting and payment providers; with professional advisers where required; with authorities where required by law or valid legal process; and with a successor in a merger, acquisition or sale of the business, subject to confidentiality protections. A current list of material sub-processors is available on request.
This website loads no third-party scripts, fonts, embeds or trackers. Typefaces are either self-hosted or already installed on your device, so no request is made to any font provider and no visitor IP address reaches one.
6. Cookies
A handful of small entries, each described in our Cookie Policy: one strictly-necessary entry that remembers your consent choice; two visit-only entries (a spam limit on the contact form, and a note that the homepage intro has played); and an anonymous analytics identifier set only if you press “Accept all” — which is also the only case in which the intro note is kept beyond your visit. If you press “Reject non-essential,” nothing optional is kept. Change your choice at any time via .
7. Continuity and Customer Data
Continuity is in development. This policy covers the Continuity website at continuity.bldtechco.com. The Continuity application itself — everything after account creation — will be governed by its own privacy notice and data processing agreement presented at sign-up, because it processes a different and larger set of data on behalf of business users — for example quotes and customer contact details for follow-up, and contract values, change orders, progress and billing details, and the names of the businesses they bill, for pay applications.
When a Continuity customer uses the product to follow up with their own leads, that customer is the controller of those contacts and BLDTechCo acts as their processor. If you received a follow-up email sent through Continuity and want your details removed, contact the business that sent it; you may also contact us at bldtechco5@gmail.com and we will route your request to them.
8. Retention
- Client records: for the engagement, then seven years for tax, accounting and dispute purposes;
- Inactive enquiries, including contact-form submissions: up to twelve months from last contact, then deleted from both our inbox and Netlify’s form storage;
- Server logs: up to thirty days;
- Consent records: twelve months from your most recent choice.
9. International Transfers
We are based in the United States, so information you send us is processed there. For personal data of EU, UK or EEA residents we rely on the European Commission’s Standard Contractual Clauses, and the UK International Data Transfer Addendum where applicable, with supplementary measures as required. Copies available on request.
10. Security
We use reasonable technical and organisational safeguards: encryption in transit (TLS), least-privilege access controls, vendor due diligence, a Content Security Policy on this site, and periodic review. No system is perfectly secure; if a breach affects you we will notify you and the relevant authorities as described in Section 15.
11. Your Rights — EU and UK
You have the right to access your data; to have inaccurate data corrected; to have it erased; to restrict processing; to object to processing based on legitimate interests; to data portability; to withdraw consent at any time without affecting prior lawful processing; and to lodge a complaint with your supervisory authority (for example the UK ICO, France’s CNIL, or Ireland’s DPC).
To exercise any right, email bldtechco5@gmail.com. We respond within thirty days, free of charge, unless a request is manifestly unfounded or excessive.
12. Your Rights — California (CCPA/CPRA)
California residents have the right to know what we have collected and why; to delete it, subject to exceptions; to correct it; to opt out of sale or sharing for cross-context behavioural advertising — we do neither, so there is nothing to opt out of; to limit the use of sensitive personal information — we collect none; and to non-discrimination for exercising these rights.
Categories collected in the last twelve months: identifiers (name, email, phone), commercial information (project enquiries), and internet activity (server logs, plus the analytics cookie where consented). Sold or shared: none.
Submit a request, yourself or through an authorised agent, to bldtechco5@gmail.com. We verify identity by matching details against what we already hold.
13. Other US State Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have broadly similar rights of access, correction, deletion, and opt-out of targeted advertising and sale, and in some states a right to appeal a refusal. Email bldtechco5@gmail.com to exercise them or to appeal.
14. Children
This website and our products are intended for business users and are not directed to children under sixteen. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
15. Breach Notification
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify affected individuals and the relevant supervisory authority without undue delay, and within seventy-two hours of becoming aware where GDPR Articles 33–34 apply, as well as meeting applicable US state breach-notification deadlines.
16. Changes and Contact
Material changes are posted here with an updated effective date. To exercise a right, ask a question, or make a complaint:
BLD Technology Co. (BLDTechCo) — Attn: Privacy
Port Washington, NY, USA
bldtechco5@gmail.com · +1 (646) 701-2171
We acknowledge requests within seven business days and respond substantively within thirty days. If our response doesn’t satisfy you, you may contact your local data protection authority.