Introduction

At Borrow & Build, we understand how important your privacy is. We are committed to protecting your personal data and being transparent about how we use it.

This Privacy Policy explains how we collect, use, store, and share your information when you interact with our website, services, and team. By using our website or services, you agree to the practices described here.

We are the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

What Does This Policy Cover?

This policy outlines:

  • What personal data we collect
  • Why and how we use it
  • When and with whom we share it
  • Your rights under data protection laws
  • How to contact us for queries

What Personal Information Do We Collect?

When you use the Borrow & Build website or sign up for our services, we collect and process the following types of data:

Personal Information:

  • Full name
  • Date of birth
  • Address and postcode
  • Email address
  • Telephone number
  • Delivery and billing information
  • Payment card details (via a secure third-party processor)
  • Subscription preferences and package details
  • Account login details (username and password)

Usage Information:

  • IP address
  • Browser type and settings
  • Device type and identifiers
  • Time zone and location data
  • Site activity, including pages viewed and interactions
  • Technical diagnostics (e.g. page errors, load times)

We may also collect marketing preferences and correspondence, including communications with our customer service team.

How Do We Use Your Data?

We process your personal data for the following purposes and on these lawful bases:

1. To Fulfil Our Contract With You

  • Set up and manage your subscription account
  • Deliver your items and handle returns
  • Take and process payments
  • Communicate about your orders and updates

2. For Our Legitimate Interests

  • Manage and improve our website and services
  • Prevent fraud and misuse of our services
  • Personalise content and product recommendations
  • Maintain internal records and reporting

3. With Your Consent

  • Send you marketing communications by email or SMS
  • Place non-essential cookies for analytics or advertising
  • Share updates, offers or promotions from us or trusted partners

4. To Comply With Legal Obligations

  • Maintain records required by HMRC or other regulatory authorities
  • Respond to lawful requests from public authorities or courts

Special Notice: Sharing Data for Debt Management

If your subscription contract is not fulfilled, and after reasonable efforts we are unable to recover borrowed items or payments, we may share your details with debt management or recovery companies for the purpose of collecting outstanding debts or recovering property. This is done strictly in accordance with data protection law and only when necessary.

Who Do We Share Your Data With?

We only share your data where necessary and with trusted third parties, including:

  • Delivery partners (e.g. Royal Mail)
  • Payment providers (e.g. Stripe)
  • IT and hosting providers who support our platform
  • Debt recovery companies, where contracts are breached
  • Legal and regulatory authorities, if required
  • Marketing or analytics partners, where consent is given
  • Professional advisers, such as accountants or solicitors

We ensure all third parties follow appropriate security and privacy standards.

How Do We Protect Your Data?

We use appropriate technical and organisational measures to secure your data, including:

  • HTTPS encryption on our site
  • Secure, tokenised payment processing
  • Password-protected user accounts
  • Access controls and monitoring on internal systems

Your Rights

You have the following rights under data protection law:

  • Access – Ask for a copy of your data
  • Rectification – Request corrections to inaccurate data
  • Erasure – Ask us to delete your data
  • Restriction – Limit how we process your data
  • Portability – Receive your data in a portable format
  • Objection – Object to processing, especially for marketing
  • Withdraw Consent – Withdraw at any time, where processing is based on consent

To exercise any of these rights, please contact us at hello@borrowandbuild.co.uk.

How Long Do We Keep Your Data?

We retain personal data only as long as necessary:

  • Account and transaction data: up to 6 years
  • Marketing data: until you opt out or withdraw consent
  • Debt and legal records: as required by law or enforcement
  • Cookies: see below

Cookies and Tracking Technologies

We use cookies and similar tools to:

  • Enable core website functionality
  • Understand visitor behaviour through analytics (e.g. Google Analytics)
  • Deliver relevant advertising (where you consent)

You can manage cookie settings via your browser.

Third-Party Links

Our site may contain links to other websites. Please be aware that we are not responsible for their content or privacy practices. We encourage you to read their privacy policies before submitting personal information.

How To Contact Us

If you have questions about this Privacy Policy, your data, or would like to make a complaint, you can contact us at:

Email: hello@borrowandbuild.co.uk

If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Last updated: 13 June 2025