Privacy Policy

Last updated: 14 September 2026

Built Faceless LTD (“Built Faceless”, “we”, “us” or “our”) operates this website and online store.

Built Faceless LTD
Company number: 16491867
Registered in: England and Wales
Registered office: 86-90 Paul Street, London, EC2A 4NE
Email: theboss@builtfaceless.co.uk

For the purposes of applicable UK data protection law, Built Faceless LTD is the data controller of personal information covered by this Privacy Policy, except where another organisation acts as an independent controller for its own processing.

Our store is powered by Shopify.

This Privacy Policy explains what personal information we collect, why we use it, the lawful bases we rely on, who information may be shared with, how long it is retained and the rights available to you.

1. Personal information we collect

Depending on how you interact with our website and services, we may collect:

Contact information

This may include:

• name
• email address
• billing address
• postal address where relevant
• other contact information you choose to provide

Order and transaction information

This may include:

• products viewed or purchased
• items added to your cart
• order details
• payment status
• transaction history
• refunds or cancellations
• digital-product delivery information

Payment information

Payments are processed using Shopify and the payment providers available through our checkout.

Payment providers may process information such as payment-card or financial-account details.

We generally do not receive or store complete payment-card details ourselves.

Account information

Where customer accounts are available, we may process information associated with your account, including account identifiers, preferences and settings.

Communications

If you contact us, we may process the information contained in your message together with information required to respond to your enquiry.

Device and usage information

When you use our website, information may be collected automatically, including:

• IP address
• browser type
• device information
• network information
• pages viewed
• interactions with the website
• referral information
• cookie and similar technology identifiers

Marketing preferences

Where applicable, we may record whether you have agreed to receive marketing and whether you have subsequently unsubscribed or changed your preferences.

2. Where we obtain personal information

We may obtain personal information:

• directly from you when you place an order, create an account, contact us or provide information to us
• automatically when you use our website, including through cookies and similar technologies
• from Shopify and service providers used to operate our store
• from payment providers
• from analytics, advertising or marketing services where those services are enabled and their use is permitted
• from other third parties where you have authorised the disclosure or where we are otherwise legally permitted to receive the information

3. Why we use your information and our lawful bases

Under UK data protection law, we need a lawful basis for processing personal information.

The basis we rely upon depends on why the information is being used.

Processing orders and supplying products

We use relevant personal information to:

• process purchases
• take or confirm payment
• deliver digital products
• provide access to purchases
• manage orders
• deal with refunds or cancellations
• provide customer support relating to an order

Lawful basis: performance of a contract with you, or taking steps at your request before entering into a contract.

Customer service and communications

We use personal information to respond to questions, product enquiries, support requests and other communications.

Lawful basis: performance of a contract where the enquiry relates to an existing or proposed purchase, or our legitimate interests in operating our business and responding to enquiries.

Security and fraud prevention

We may use personal information to:

• protect our website and customers
• detect suspicious activity
• prevent fraud
• enforce our terms and licences
• investigate misuse of our services

Lawful basis: our legitimate interests in protecting our business, website, customers and legal rights, and where applicable compliance with legal obligations.

Legal, tax and accounting requirements

We may retain and use transaction and other information where necessary to meet accounting, tax, regulatory or other legal requirements.

Lawful basis: compliance with a legal obligation.

Improving our website and services

We may analyse how customers use the website to understand performance, identify technical issues and improve our products, website and customer experience.

Lawful basis: our legitimate interests in operating and improving our business where the processing does not override your rights and interests.

Where non-essential cookies or similar technologies require consent, we rely on consent instead.

Marketing communications

Where permitted, we may use your contact information to send information about Built Faceless products, offers or services.

For individuals, electronic marketing will only be sent where:

• you have provided the required consent; or
• the applicable UK rules permit us to rely on the existing-customer “soft opt-in” and its requirements have been satisfied.

You can unsubscribe at any time.

Where consent is required, the lawful basis is consent. Where the lawful soft opt-in applies, we may rely on our legitimate interests in marketing similar Built Faceless products to existing customers, subject to your right to opt out.

UK electronic-marketing rules generally require consent unless the limited existing-customer soft opt-in applies.

Advertising and non-essential tracking

Where we use advertising, analytics or similar technologies that require consent, we will seek the required consent before using them.

Lawful basis: consent where required by applicable privacy or electronic-communications law.

You may withdraw consent using the privacy or cookie controls available on our website where applicable.

4. Legitimate interests

Where we rely on legitimate interests, those interests may include:

• operating and administering Built Faceless
• providing customer support
• protecting our website and systems
• preventing fraud and misuse
• enforcing our contractual and licensing rights
• improving our products and website
• understanding the performance of our business
• marketing similar products to eligible existing customers where legally permitted

We consider whether our interests are proportionate and whether your rights and interests override them before relying on this basis.

5. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• operate essential website and checkout functionality
• remember settings and preferences
• maintain security
• understand website performance
• measure usage
• support advertising or marketing where enabled

Some cookies are necessary for the website to operate.

Where consent is legally required for non-essential cookies or similar technologies, those technologies will be subject to the applicable consent controls.

You can change available privacy or cookie preferences through the controls provided on our website.

6. How we share personal information

We may disclose personal information where necessary to operate Built Faceless, including to:

Shopify

Built Faceless uses Shopify to provide its ecommerce services.

Information submitted through our store may therefore be processed by Shopify and its service providers. Shopify may also process certain information as an independent data controller for its own purposes, including where Shopify Network Intelligence or other Shopify services are enabled.

Information may be processed in countries outside the United Kingdom in accordance with applicable data-protection requirements.

You can read more about how Shopify uses personal information in the [Shopify Consumer Privacy Policy](https://www.shopify.com/legal/privacy/app-users).

You can also manage certain privacy rights relating to information processed by Shopify through the [Shopify Privacy Portal](https://privacy.shopify.com/en).

Payment providers

Payment information may be shared with the payment provider selected at checkout for payment processing, fraud prevention and related services.

Service providers

We may use providers that assist with services such as:

• website hosting and ecommerce
• digital-product delivery
• cloud storage
• email services
• customer support
• analytics
• security
• fraud prevention
• accounting or professional services

They receive information only as necessary for the relevant service and subject to applicable legal requirements.

Advertising and marketing providers

Where advertising or marketing services are enabled, information may be shared with relevant providers where legally permitted and subject to required privacy choices or consent.

Legal and regulatory disclosures

We may disclose information where reasonably necessary to:

• comply with law
• respond to a valid legal or regulatory request
• establish, exercise or defend legal rights
• investigate fraud or unlawful activity
• protect Built Faceless, our customers or others

Business transactions

If all or part of the business is reorganised, sold, transferred or merged, relevant information may be transferred as part of that transaction subject to applicable law.

7. Shopify

Built Faceless uses Shopify to provide its ecommerce services.

Information submitted through our store may therefore be processed by Shopify and its service providers.

Shopify may process information in countries outside the United Kingdom.

You can find information about Shopify's own privacy practices through Shopify's privacy resources.

8. International transfers

Some organisations that provide services to us or to Shopify may process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate protections will be used where required by law.

These may include:

• UK adequacy regulations
• the UK International Data Transfer Agreement
• the UK Addendum to approved Standard Contractual Clauses
• another legally recognised transfer mechanism

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including where required to:

• fulfil and administer orders
• provide customer support
• maintain transaction and accounting records
• comply with tax or legal requirements
• resolve disputes
• prevent fraud
• enforce contracts and licences
• establish or defend legal claims

Retention periods therefore vary depending on the type of information and the reason it is held.

When information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

10. Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

However, no internet transmission or storage system can be guaranteed to be completely secure.

You should avoid sending unnecessary sensitive or confidential information through unsecured communication channels.

11. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to personal information we hold about you
• request correction of inaccurate or incomplete information
• request deletion of personal information
• request restriction of processing
• object to certain processing
• receive certain personal information in a portable format
• withdraw consent where processing is based on consent
• object to direct marketing at any time

These rights are not absolute and may be subject to legal exceptions.

If you withdraw consent, this does not affect processing that was lawful before consent was withdrawn.

To exercise a privacy right, contact:

theboss@builtfaceless.co.uk

We may need to verify your identity before completing certain requests.

12. Marketing choices

You can unsubscribe from marketing emails at any time using the unsubscribe option included in the message.

Unsubscribing from marketing does not prevent us from sending necessary non-marketing communications relating to purchases, accounts, security or customer support.

13. Children

Our services are not intended for children.

We do not knowingly seek to collect personal information from children for the purpose of selling our products to them.

If you believe a child has provided personal information to us inappropriately, contact us at theboss@builtfaceless.co.uk.

14. Third-party websites

Our website may contain links to third-party websites or services.

Those organisations operate independently and may have their own privacy practices.

Built Faceless is not responsible for how independent third parties process information on websites or services that we do not control.

15. Complaints

If you have a concern about how Built Faceless uses your personal information, contact us first at:

theboss@builtfaceless.co.uk

You also have the right to make a complaint to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information about making a complaint is available through the ICO website.

16. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our services, processing activities, legal requirements or business practices.

When we make changes, we will update the Last updated date at the top of this policy.

Where required by law, we will provide additional notice of material changes.

17. Contact

For questions about this Privacy Policy, the use of your personal information or your data-protection rights, contact:

Built Faceless LTD
Company number: 16491867
Registered in: England and Wales
Registered office: 86-90 Paul Street, London, EC2A 4NE
Email: theboss@builtfaceless.co.uk