Skip to content
BuildKitHQ

Privacy policy

Short version: we collect what we need to sell you a kit and answer your questions, we do not sell it on, and nothing analytics-shaped runs before you accept it.

Last updated 1 October 2026

Who we are

BuildKitHQ, 3800 N Lamar Blvd, Suite 210, Austin, TX 78756, United States. Questions about this policy go to .

What we collect

When you contact us or ask for a quote

Your name, email address, optionally your company, and whatever you write in the message. We use it to reply, to send the kit links you asked for, and to keep a record of the conversation so the next person who reads it has context.

When you buy something

Billing name, email and address, plus the order record. Card details are handled by our payment processor and never reach our servers.

When you use this website

Your browser stores your theme, accent palette, accessibility settings and cookie choice on your own device. Those never leave your browser and we cannot read them. If you accept analytics, Google Analytics 4 counts page views and events against a random browser ID (details below). If you decline, we collect none.

Cookies and local storage

Nothing beyond the strictly necessary runs until you make a choice in the consent banner. Strictly necessary means the small set of local storage keys that remember your theme, accessibility preferences and the consent decision itself. Analytics and marketing are off by default and stay off if you decline. You can change your answer at any time from the cookie settings link in the footer.

Google Analytics

Our analytics provider is Google Analytics 4, operated by Google LLC. The Google tag is not downloaded at all until you turn analytics on, either with "Accept all" or with the Analytics switch under "Manage". Choose "Reject non-essential" and no request goes to Google.

With your consent, Google Analytics collects:

  • Pages viewed: which pages and kits you open, and in what order.
  • Device and browser: device type, operating system, browser and screen size.
  • Approximate location: country and city level, estimated from your IP address.
  • Referrer: the site, search or link that sent you here.

GA4 anonymises IP addresses: it uses them to estimate location and does not log or store them. Two first-party cookies are set on buildkithq.com: _ga tells one browser from another, and _ga_PVSMQKS3HNholds session state. Each lasts up to 2 years, per Google's defaults. Our property retains analytics data for 14 months.

To withdraw consent, open Cookie settings in the footer, switch Analytics off and save (or press "Reject non-essential"). Measurement stops from that point. See Google'sprivacy policy for how Google handles the data, and its browser opt-out add-on to block Google Analytics on every site.

How long we keep it

  • Enquiries: two years from the last message, then deleted.
  • Newsletter signups: until you unsubscribe, then thirty days.
  • Order records: seven years, because tax law requires it.
  • Google Analytics data: fourteen months, then deleted by Google. The cookies expire after up to two years.

Who we share it with

Our payment processor, our email delivery provider, our hosting provider, and Google LLC (Google Analytics, only if you accept analytics). Each one only receives what it needs to do its job. We do not sell personal data, we do not trade mailing lists, and we do not pass your details to other agencies.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email and we will action it within thirty days. You do not need to give a reason and asking will not affect your support.

If you are in the EU or UK, our lawful basis is contract for purchases, legitimate interest for replying to enquiries, and consent for marketing and analytics. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA.

Security

The site is served over HTTPS. Access to customer records is limited to the people who need it and protected by two-factor authentication. If a breach ever affects your data we will tell you directly rather than posting a notice and hoping you read it.

Changes

If this policy changes materially we will update the date at the top and, for anything that affects how we use data you already gave us, email you before it takes effect.