Privacy policy
BuildYume (“we,” “us,” “our”) builds custom digital tools and websites for businesses. This policy explains what personal data we collect through buildyume.com, why we collect it, and what rights you have over it — whether you’re contacting us from India or anywhere else in the world.
- Last updated
- 8 September 2026
- Applies to
- buildyume.com
What we collect
Information you provide directly, through the contact form:
- Name
- So we know who we’re replying to.
- Email address
- Where the reply goes.
- Your brief
- A description of what you’re looking to build.
- Budget range
- Optional — you’re never required to provide this.
Information collected automatically, through the analytics tools described in Section 7 (Umami, and — only with your consent — Google Analytics and Microsoft Clarity): standard technical data such as IP address, browser type, and pages visited.
We do not collect payment information through this website. Payment details for actual client engagements are handled separately, through the terms set out in a signed Statement of Work.
Why we collect it
We use the information above only to:
- Respond to your enquiry and discuss your project
- Prepare a quotation, where relevant
- Maintain a record of the conversation for our own reference
We do not use your information for advertising, and we do not sell it to anyone, under any circumstances.
Legal basis for processing (relevant under both DPDP and GDPR): submitting the contact form is a voluntary action, and your consent to that specific purpose — being contacted back about your enquiry — is the basis on which we process it. We do not use your data for any purpose beyond what you submitted it for.
How we share your information
We do not sell, rent, or trade your personal data. It’s shared only with:
- Netlify Forms
- The service that receives and delivers your contact form submission to us.
- Netlify
- Where the website itself is hosted.
- Google & Microsoft
- Google Analytics and Microsoft Clarity — only if you’ve accepted the cookie banner described in Section 7. Declining means neither ever receives your data.
- Umami
- Receives only anonymous, non-identifying traffic data, regardless of your cookie choice.
All are service providers acting on our behalf, not independent recipients using your data for their own separate purposes.
International data transfers
BuildYume is based in Chennai, India, and works with clients internationally. Depending on the specific services named in Section 3, your data may be processed or stored on servers outside your own country. Where this applies to a visitor covered by GDPR, we rely on the safeguards required by that law (such as standard contractual clauses) for any such transfer.
How long we keep your data
We retain contact form submissions only as long as needed to respond to your enquiry and maintain a reasonable record of the conversation, or until you request deletion — whichever comes first.
Your rights
If you’re in India, under the Digital Personal Data Protection Act (DPDP):
- The right to access the personal data we hold about you
- The right to request correction of inaccurate data
- The right to request erasure of your data
- The right to file a grievance with us directly, and if unresolved, with the Data Protection Board of India
If you’re in the EU, EEA, or UK, under GDPR — in addition to the above:
- The right to restrict how we process your data
- The right to object to processing
- The right to receive your data in a portable format
- The right to lodge a complaint with your local data protection supervisory authority
Wherever you are, we extend the same basic courtesy regardless of which specific law technically applies to you: tell us what you want done with your data, and we’ll act on it.
To exercise any of these rights, contact us using the details in Section 10.
Cookies and analytics
We use a two-tier approach, so that the choice to be tracked is genuinely yours, not a technicality:
- Umami — always on
- Runs automatically for every visitor. It’s cookieless and can’t identify you individually — it only gives us accurate overall traffic numbers. No consent is needed for this, because nothing personally identifiable is collected.
- GA4 & Clarity — on consent
- Google Analytics (GA4) and Microsoft Clarity use cookies and can show us how visitors move through the site. These load only after you click “Accept” on the cookie banner. If you decline, these scripts are never fetched at all — not merely set to a limited or anonymous mode.
You can change your choice at any time using the control below. Your current choice: not set.
Children’s privacy
This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
Security
We take reasonable technical and organizational measures to protect the personal data we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but we do not treat this as a reason to be careless with what’s collected in the first place, which is also why we collect no more than the contact form actually needs.
Contact and grievances
For any question about this policy, to exercise your rights, or to raise a concern about how your data has been handled:
If you’re in India and a concern raised with us directly remains unresolved, you may escalate it to the Data Protection Board of India.
Changes to this policy
We may update this policy as the site, our tools, or applicable law change. The “Last updated” date at the top will reflect the most recent revision. Material changes affecting how your data is used will be reflected here, not announced separately unless legally required.