On this page
- Who we are
- What personal data we collect
- How we use and share your personal information
- Automated interactions
- How long we keep your information
- Cookies
- Where your data is processed
- Your rights
- Profiling
- Personal information we process on behalf of clients
- Children
- Data security
- Links to third-party websites
- Changes to this Policy
- Contact
In accordance with applicable data protection laws, including United States federal and state privacy laws, the Australian Privacy Act 1988 and the GDPR, BuildaBox is committed to data security and transparency. This Privacy Policy explains how we collect, use, share and safeguard your personal data when you interact with our website and our services.
Who we are
Buildabox Consulting Pty Ltd, trading as BuildaBox, is located at Office 4125, Ground Floor, 470 St Kilda Road Melbourne VIC 3004.
We act as the data controller for personal information collected through this website and our related marketing activities. As the controller, we determine why personal information is processed and how.
BuildaBox provides website design and development, digital marketing, business automation and AI agent services to small and mid-sized businesses. This website operates primarily as a marketing and enquiry channel, and personal information collected through it is used for that purpose.
This Privacy Policy forms part of our Terms of Use. We review and update it from time to time, so please revisit it periodically. Questions may be directed to contact@buildabox.agency.
What personal data we collect
We collect the personal information necessary to respond to enquiries, deliver and improve our services, and carry out marketing activities.
Information you provide directly
Examples include, but are not limited to:
- Full name
- Email address
- Phone or WhatsApp number, including country code
- Company name
- Service required
- Project budget range
- Project details and any other content of your communications with us
- Scheduling details when you book a call with us
- Messages submitted to the AI agent on our website
- Billing and account details, where you become a client
- Brand assets, content and system access provided to us for the purpose of delivering services
- CV and application details, where you contact us about a role
Information we collect automatically
When you visit our website, we may collect:
- IP address
- Approximate geographic location
- Browser type and version
- Device and operating system information
- Referral source
- Pages viewed and navigation patterns
- Information collected through cookies and similar technologies
Information received from third parties
We may receive information from publicly available business sources, from partners or existing clients who refer you to us, and from the analytics and advertising platforms we use. Where a third-party platform shares information with us on the basis of your consent, we recommend reviewing that platform’s own privacy policy.
Sensitive information
We do not seek sensitive information through this website. Please do not submit health information, government identifiers, financial account credentials or payment card details through our enquiry forms or the AI agent. Where an engagement necessarily involves sensitive or regulated information, this is addressed under a separate written agreement before any such information is provided to us.
Automated interactions
Our website makes available an AI agent that responds to visitor questions and assists with scheduling. Messages submitted to it are processed by third-party AI service providers engaged by us and are retained within our systems. Conversations may be reviewed by our personnel for quality and support purposes.
Full details of how we operate AI systems, including provider handling, human escalation and accuracy limitations, are set out in our AI Usage Policy.
How long we keep your information
We retain personal information only for as long as it is required for the purposes described in this Policy, or for as long as we have a lawful basis for retaining it.
- Where you request deletion, we will delete your information unless we are legally required to retain it.
- We do not retain personal information indefinitely.
- Where we rely on legitimate interests, information is retained for the duration of the business relationship.
- Where no business relationship commences, enquiry information is retained only for the period reasonably necessary for follow-up communication and analysis, after which it is treated as outdated.
- Financial and contractual records are retained for the periods required by tax, accounting and limitation of actions legislation.
Where your data is processed
BuildaBox operates internationally, and personal information may be processed in or transferred to Australia and the United States, as well as to the locations of the service providers we engage.
Such transfers occur only to the extent reasonably necessary for the purposes set out in this Policy. Where personal information is transferred from the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses or another lawful transfer mechanism. Where personal information is disclosed outside Australia, we take reasonable steps to ensure that the recipient handles it in a manner consistent with the Australian Privacy Principles.
Your rights
Subject to the law applicable to you, you have the following rights:
- Right to information: You may request confirmation of whether we hold personal information about you and, if so, what information is held and for what purposes it is processed.
- Right of access: You may request a copy of the personal information we hold about you.
- Right to rectification: You may request correction of personal information that is inaccurate or incomplete.
- Right to erasure: You may request deletion of your personal information where there is no lawful basis for us to continue processing it.
- Right to object: You may object to processing based on our legitimate interests where your particular circumstances justify the objection, and you may object at any time to processing for direct marketing purposes.
- Right to object to automated decision-making: You may object to being subject to decisions made solely by automated means, including profiling.
- Right to restriction of processing: You may request that we suspend processing of your personal information, for example while its accuracy is verified.
- Right to data portability: You may request your personal information in a structured, commonly used and machine-readable format, or request its transfer to another party where technically feasible.
- Right to withdraw consent: You may withdraw consent at any time in respect of processing based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to opt out of sale or sharing: Where applicable United States state law provides it, you may opt out of the sale or sharing of personal information and of targeted advertising.
To exercise any of these rights, contact us at contact@buildabox.agency. Before acting on a request we may require specific information from you in order to verify your identity. We will respond within the period required by the law applicable to you. We will not treat you differently for exercising these rights.
You also have the right to lodge a complaint with a supervisory authority at any time. In Australia this is the Office of the Australian Information Commissioner. In the European Economic Area this is the supervisory authority in the Member State where you live or work, or the European Data Protection Board. In the United Kingdom this is the Information Commissioner’s Office. In the United States this is the Attorney General of your state.
For further information about these rights and how to exercise them, the European Commission publishes a detailed guide in multiple languages.
Profiling
We carry out audience segmentation and remarketing only where you have consented to receive marketing communications from us or where applicable law otherwise permits it. We do not carry out profiling that produces legal or similarly significant effects.
Personal information we process on behalf of clients
Where we build a website, run marketing campaigns, or deploy an AI agent or automation for a client, personal information belonging to that client’s own customers and website visitors is processed on the client’s instructions and in accordance with the client’s own privacy policy. In those circumstances the client is the controller and BuildaBox acts as a processor or service provider.
If you are a customer of one of our clients and wish to exercise privacy rights, please contact that business directly. Requests received by us will be forwarded to the relevant client where it can be identified.
Engagements involving clients in regulated industries are subject to additional contractual terms agreed in writing before deployment.
Children
Our website and services are directed at businesses and not at children. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and the information will be deleted.
Data security
We maintain organisational and technical measures appropriate to the nature of the information we hold and the risks involved, including:
- Confidentiality obligations for employees, contractors and partners
- Access controls limiting personal data to personnel who require it
- Vetting of the service providers and vendors we engage
- Periodic review of our security practices
No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. Where a data breach occurs that gives rise to a notification obligation, we will notify affected individuals and the relevant regulator as required by law.
Links to third-party websites
Our website contains links to third-party websites and services which we do not control. We are not responsible for their content or their privacy practices, and we encourage you to review their policies before providing personal information.
Changes to this Policy
We may amend this Privacy Policy from time to time. The current version is published on our website together with the date on which it was last updated. Continued use of our website or services following an update constitutes acceptance of the amended Policy.
Contact
contact@buildabox.agencyBuildabox Consulting Pty LtdOffice 4125, Ground Floor470 St Kilda Road, Melbourne VIC 3004Looking for the rest of our legal terms?
Read our Terms of Use