Privacy Policy
Last updated: May 3, 2026
1. Data Controller
WhatsBuilt Oy
Business ID: [To be added]
Finland
Email: privacy@whatsbuilt.fi
2. What Data We Collect
Contact Form Submissions
When you submit our "Book Demo" form, we collect:
- Name
- Work email address
- Company name
- Optional message
Automatically Collected Data
Our hosting provider (Amazon CloudFront) automatically logs standard access data including IP addresses, browser type, and pages visited. These logs are used for security monitoring and are retained for 30 days.
3. How We Use Your Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Contact form data | Respond to your inquiry and schedule a demo | Legitimate interest (Art. 6(1)(f) GDPR) |
| Access logs | Security monitoring, abuse prevention | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Sub-processors
We use the following third-party services to process your data:
| Service | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Website hosting, CDN, access logs | EU (Stockholm, eu-north-1) |
| Formspree | Contact form processing | United States |
Data transfers to the United States (Formspree) are covered by the EU-US Data Privacy Framework.
5. Data Retention
- Contact form submissions: Retained for 24 months after your last interaction, then deleted.
- Access logs: Automatically deleted after 30 days.
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Complaint — file a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)
To exercise any of these rights, contact us at privacy@whatsbuilt.fi. We will respond within 30 days.
7. Cookies
This website does not use cookies or any client-side tracking technology.
8. Security
All data is transmitted over HTTPS (TLS 1.2+). Our infrastructure is hosted on AWS with encryption at rest (AES-256) and in transit. Access to personal data is restricted to authorized personnel only.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be announced on our website.
10. Contact
For any privacy-related questions or requests:
Email: privacy@whatsbuilt.fi
WhatsBuilt Oy, Finland