Privacy Policy

1. What we collect

Email address. If you sign up to be notified about upcoming features (such as the Discover directory), we collect your email address. This is the only personal data we actively collect.

Server logs. Our web hosting provider may collect standard server log data, which can include:

• IP address
• Browser type and version (user agent)
• Pages visited and timestamps
• Referring URL

This data is collected automatically by the hosting infrastructure and is not used to identify individual visitors.

2. How we use your information

Email addresses are used solely to send you notifications about the features you signed up for (e.g. the Discover directory launch). We will not use your email for unrelated marketing or share it with third parties for their own purposes.

Server log data, where collected by our hosting provider, is used solely for:

• Maintaining site security and performance
• Diagnosing technical issues
• Understanding aggregate traffic patterns

3. Legal basis for processing

We process your personal data based on the following legal grounds under UK GDPR:

• Consent — Where you have given explicit consent, such as submitting your email address via the notification signup form. You can withdraw consent at any time by unsubscribing.
• Legitimate interests — For maintaining site security and analysing aggregate traffic patterns.

4. Cookies and analytics

We do not set any cookies. This site uses Plausible Analytics, a privacy-focused analytics tool. Plausible does not use cookies, does not collect personal data, and does not track individual visitors across sites.

Plausible collects aggregate, anonymous data including: page URLs visited, referral source, browser and operating system type, device type, and country. This data cannot be used to identify you. No consent banner is required as no personal data is processed.

All analytics data is hosted on EU-based servers (Hetzner, Germany) and never leaves the EU. See Plausible's data policy for full details.

5. Data sharing

We do not sell your personal information. We may share your data with:

• Service providers — Third parties who help us operate the site (see section 6)
• Legal authorities — When required by law or to protect our legal rights

6. Third-party services

This site uses the following third-party services:

• EmailOctopus — for storing email addresses and sending notification emails. Your email address is transmitted to EmailOctopus when you subscribe. EmailOctopus acts as a data processor on our behalf. See their privacy policy.
• Google Fonts — for web typography. Google may collect usage data in accordance with their privacy policy.
• Plausible Analytics — for anonymous, aggregate traffic analytics. No personal data is collected. See their data policy.
• Cloudflare — for hosting, content delivery, and running our API worker. See their privacy policy.

7. Data retention

Email addresses are retained for as long as you remain subscribed. You can unsubscribe at any time using the link in every email we send, or by contacting us. Once you unsubscribe, your email is deleted from our mailing list.

Server logs are managed by our hosting provider in accordance with their own retention policies.

8. Embeds and third-party sites

Build What Matters provides embeddable assets (badges, banners, and other HTML elements) that third-party websites may choose to display. When you visit a site that uses these assets, a small script is loaded from our CDN (cdn.buildwhatmatters.io). This script renders the visual embed only. It does not set cookies, collect personal data, track visitors, or transmit any information back to us about you or your visit to that site.

We are not responsible for the privacy practices, data collection, or content of any third-party website that displays Build What Matters assets. The presence of a Build What Matters badge or embed on a site does not indicate that we have reviewed, approved, or have any control over that site's privacy practices. You should review the privacy policy of any site you visit.

If a third-party site references Build What Matters or links to buildwhatmatters.io, this privacy policy applies only to data collected on buildwhatmatters.io itself, not to any data collected by that third-party site.

9. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Restriction — Request restriction of processing
• Portability — Request transfer of your data to another service
• Objection — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent at any time (via the unsubscribe link in any email)

To exercise these rights, contact us at the address in section 11 below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

11. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: support [AT] gettoknow.me