1. About this policy
This Privacy Policy explains how 131 Built LLC ("131", "we", "us" or "our") collects, uses, stores and protects personal information when you visit use131.com, submit a Contact or Information Health Check form, make an enquiry, request a proposal or scope of work, or engage with our services.
131 BUILT LLC is a Florida limited liability company and is the controller of the personal information described in this policy.
Contact: hello@use131.com
We serve organisations and professionals in the United States and the United Kingdom. Where United Kingdom data protection law applies, we process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (PECR). We also comply with applicable United States federal and state privacy laws.
2. Personal information we collect
The personal information we collect depends on how you interact with us.
Contact and service enquiries
When you contact us through the website or by email, we may collect:
your name and business email address;
your organisation and role or job title;
the service or type of enquiry you select;
the contents of your message and any information you choose to provide;
correspondence relating to your enquiry; and
information needed to prepare or discuss a proposal, quotation, scope of work or potential engagement.
Information Health Check
When you submit an Information Health Check, we may collect:
your contact and professional details;
your responses to the Health Check questions;
information you provide about an organisation, project, asset, system, drawing collection or information-management process;
any additional context you choose to provide; and
the resulting assessment, observations and related correspondence.
Please provide only information that is relevant and that you are authorised to disclose. Do not submit personal information about another person unless you have a lawful basis and authority to do so. Please do not submit special-category or highly sensitive personal information through our general website forms.
Client and business records
If an enquiry progresses to an engagement, we may also collect and maintain:
client and project contact details;
proposals, scopes of work, contracts and related correspondence;
records needed to plan, administer and deliver the agreed services;
billing, invoice and payment-status information; and
records required for legal, accounting, insurance and business-administration purposes.
The website does not currently collect payment-card details or provide user accounts.
Website and technical information
Our website is hosted through Framer. Framer may process technical, network, device and security information needed to deliver the website, process forms, prevent spam and abuse, and maintain security. This may include an internet protocol address, browser or device characteristics, interaction or network signals, requested pages, referring source and timestamps.
We use Framer's built-in, privacy-focused analytics to understand general website activity. Framer Analytics does not use analytics cookies or create persistent visitor identifiers. It provides aggregate information such as unique visitor counts, page views, top pages and referring sources. We do not currently use Google Analytics, advertising pixels or behavioural advertising technologies.
3. How we obtain personal information
We may obtain personal information:
directly from you when you use a form, email us or communicate with us;
from the organisation you represent or another authorised member of a project or client team; and
automatically through the technical operation, security and aggregate analytics functions of the website.
4. How we use personal information
We may use personal information to:
receive, assess and respond to enquiries;
provide the Information Health Check and communicate the result;
discuss a potential engagement and prepare a proposal, quotation or scope of work;
enter into, administer and perform an agreed client engagement;
communicate with client, supplier and project contacts;
understand the use and performance of the website;
improve our website, forms, resources and services;
protect the security and integrity of the website and prevent fraud, spam and misuse;
maintain appropriate business, accounting, insurance and legal records;
establish, exercise or defend legal claims; and
comply with applicable legal and regulatory obligations.
Submitting a form or making an enquiry does not subscribe you to marketing communications. We do not currently operate a website newsletter or use submitted contact details for unrelated email marketing.
5. Lawful bases under UK data protection law
Where the UK GDPR applies, we rely on one or more of the following lawful bases:
Legitimate interests: to respond to professional and business enquiries; provide and improve the Health Check, website and services; administer business relationships; maintain security; and protect our legal and commercial interests. We consider whether these interests are proportionate and balanced against the rights and interests of the individuals concerned.
Contract and pre-contractual steps: where processing is necessary to take requested steps before entering into a contract, such as preparing a quotation or scope of work, or to perform a contract with the individual concerned.
Legal obligation: where processing is necessary to comply with applicable legal, tax, accounting or regulatory requirements.
Consent: where we specifically request consent for a distinct purpose. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
Where a client contract is with an organisation rather than an individual, we may rely on legitimate interests to process the business contact details of that organisation's representatives.
6. How we share personal information
We do not sell personal information. We do not share personal information for cross-context behavioural advertising or use it for targeted advertising.
We may share personal information only as reasonably necessary with:
Framer, which provides website hosting, form processing, security and aggregate analytics;
business email, cloud-storage and communications providers, including Google Workspace;
professional advisers, insurers, accountants and legal advisers;
contractors or service providers supporting our operations, subject to appropriate confidentiality and data-protection obligations;
regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
a buyer, successor or relevant adviser in connection with a proposed or completed merger, acquisition, financing, restructuring or transfer of all or part of our business, subject to appropriate safeguards.
We require service providers that process personal information on our behalf to use it only for authorised purposes and to protect it appropriately.
7. International processing and transfers
131 is established in the United States. If you are located in the United Kingdom, personal information you submit to us will be processed in the United States. Our service providers may also process information in the United States, the United Kingdom, the European Economic Area or other jurisdictions in which they operate.
Where UK data protection law requires safeguards for a restricted transfer initiated by us, we use an applicable adequacy mechanism or appropriate contractual safeguards, such as the United Kingdom International Data Transfer Agreement or the UK Addendum to approved Standard Contractual Clauses, together with any required transfer assessment. You may contact us for further information about the safeguards relevant to your information.
8. Data retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance, security and dispute-resolution requirements.
As a general guide:
general enquiries and related correspondence that do not become an engagement are ordinarily retained for up to 12 months after the last substantive contact;
Health Check submissions, results and related correspondence are ordinarily retained for up to 12 months after completion or the last substantive contact;
proposals and scopes of work that do not result in an engagement are ordinarily retained for up to 24 months after the last substantive contact; and
client, contractual, service-delivery, billing and related business records may be retained for the duration of the engagement and ordinarily for up to seven years afterwards.
We may retain information for longer where reasonably necessary to comply with law, preserve evidence, resolve a dispute, enforce an agreement or protect legal rights. We may retain aggregated or de-identified information that no longer identifies an individual.
9. Data security
We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure. These measures include limiting access to those who need the information for authorised purposes and using reputable service providers with contractual and security commitments.
No internet transmission or electronic-storage system is completely secure. We therefore cannot guarantee absolute security.
10. Your UK data-protection rights
If the UK GDPR applies to your personal information, you may have the right to:
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of information in certain circumstances;
request restriction of processing in certain circumstances;
object to processing based on legitimate interests;
receive certain information in a portable format where applicable;
withdraw consent where processing is based on consent; and
complain to a supervisory authority.
You have an absolute right to object at any time to the use of your personal information for direct marketing. 131 does not currently use website submissions for direct marketing.
These rights are not absolute and may be subject to legal conditions or exemptions. To exercise a right, contact hello@use131.com. We may request information needed to verify your identity and respond securely.
You may also lodge a complaint with the United Kingdom Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concern first.
11. United States privacy rights
Depending on your state of residence and whether the relevant law applies to 131, you may have rights to request access to, correction of or deletion of personal information; obtain a portable copy; opt out of certain sales, sharing, targeted advertising or profiling; and appeal a decision regarding a privacy request.
131 does not sell personal information, share it for cross-context behavioural advertising, or process it for targeted advertising. We will not discriminate against you for exercising a privacy right available under applicable law.
To make a request, contact hello@use131.com. We may need to verify your identity and authority before completing a request. An authorised agent may submit a request where permitted by law, subject to appropriate verification.
12. Automated decision-making
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. The Information Health Check is an initial diagnostic and does not itself determine whether we will enter into a client engagement.
13. Children
The website and our services are intended for organisations and professionals and are not directed to children. We do not knowingly collect personal information from children through the website. If you believe a child has provided personal information, please contact us so that we can take appropriate action.
14. Third-party links
The website may link to third-party websites, standards bodies, publications or other resources. Those third parties operate under their own privacy practices. We are not responsible for their websites or privacy practices, and we encourage you to review their privacy notices.
15. Changes to this policy
We may update this Privacy Policy to reflect changes in our website, services, providers, legal obligations or privacy practices. The revised policy will be posted on this page with an updated date. Where required, we will provide additional notice of a material change.
16. Contact us
Questions, concerns and privacy-rights requests may be directed to:
131 BUILT LLC
Florida, United States
hello@use131.com
use131.com