Effective date: 20 October 2026

Who we are

Built by HND is the trading name of Sophie Henderson, a sole trader based in Greater Manchester, UK.. Contact: hello@builtbyhnd.co.uk. We are the controller of personal data collected through this website and direct enquiries.

What information we collect

When you submit our WPForms enquiry form or contact us by email, we may collect your name, business name, email address, telephone number (if provided), project details and correspondence. For clients we may also process billing, payment reference, website credentials or project materials as necessary. Our WordPress site uses Elementor, an SMTP email plugin and IONOS hosting; verify the actual SMTP provider and any cookies in use.

Why we use it and our lawful bases

• To respond to enquiries and prepare quotes: our legitimate interests in responding to prospective clients, or steps requested before entering a contract.
• To deliver projects, communicate about work and manage payments: performance of a contract or steps before entering one.
• To maintain records for tax and accounting: compliance with legal obligations.
• To protect the website against abuse and maintain security: legitimate interests in operating a secure service.
• We do not currently send marketing newsletters or promotional emails to enquirers. If this changes, we will update this policy and comply with applicable direct marketing rules.
• For non-essential analytics or marketing technologies: obtain any consent required under UK cookie rules and identify the applicable UK GDPR lawful basis.

Who receives information

We may share data with service providers where needed to operate the site and deliver services, including IONOS (hosting), WordPress/Elementor and WPForms as configured, the actual SMTP email provider, and banking or accounting services used for invoicing. We do not sell personal information.

International transfers

Some providers may process data outside the UK. Before publishing, confirm each provider, relevant transfer locations and lawful transfer safeguards, and update this section with accurate details.

How long we keep information

Our proposed retention approach is to delete unsuccessful enquiry correspondence after approximately 12 months without meaningful contact, unless needed for a legal reason. We generally retain project correspondence for up to 3 years after completion unless a longer period is justified, and retain tax/accounting records for legally required periods. These periods must be checked against actual storage, backups and business needs before publishing.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to certain processing; you may withdraw consent at any time without affecting prior lawful processing. Email hello@builtbyhnd.co.uk. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

Security, children and changes

We take proportionate measures to safeguard information, but no online transmission is completely secure. Our services are intended for business customers and not specifically directed at children. We may update this notice and will show the revised effective date.