Privacy Policy

Effective Date: 1 January 2026 · Last reviewed: May 2026

Introduction

This Privacy Policy explains how Build Influence FZCO ('Build Influence', 'we', 'us' or 'our') collects, uses, stores and protects personal information when you visit our website at www.build-influence.com (the 'Site'), subscribe to our newsletter, complete a lead magnet form, book a discovery call, or otherwise interact with us.

This Privacy Policy also explains how we handle the personal data we process on behalf of our clients during a Build Influence engagement (such as a Launch Offer engagement or a Standard Accelerator engagement). In those engagements, the client is the data controller and Build Influence acts as a data processor. The specific terms of that relationship are set out in a separate Data Processing Addendum entered into between Build Influence and the client at the point of signing the relevant client agreement.

Build Influence is committed to protecting your personal data and processing it in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and any applicable data protection legislation in the United Arab Emirates.

Table of Contents:

1. Who we are and how to contact us

Build Influence FZCO is a free zone company incorporated in the United Arab Emirates under International Free Zone Authority (IFZA) registration, with its registered address at IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.

Build Influence is the data controller for personal data collected through the Site and for the data we collect about our newsletter subscribers, leads, prospects and clients in the course of running our business.

For any data protection enquiries, including requests to exercise your rights under UK GDPR (such as access, correction, deletion or objection), please contact us at [email protected]. We will respond to verified requests within one calendar month.

We have not appointed a Data Protection Officer as we are not required to do so under UK GDPR Article 37. The point of contact for all data protection enquiries is

2. The personal data we collect

Build Influence collects the categories of personal data described below. We collect only the data we need to operate our business and provide the services you have requested or signed up to.

2.1 Information you provide directly

  • Full name. Provided when you subscribe to our newsletter, opt in to a lead magnet, complete a contact form, book a discovery call, or sign up to a Build Influence engagement.

  • Email address. Provided in the same circumstances as above. Used to send you the newsletter, the lead magnet, discovery call confirmations, and service-related communications.

  • Phone number. Provided when you book a discovery call or sign up to a Build Influence engagement, used for booking confirmations and operational communications during a live engagement.

  • Business information. Including business name, role, industry, sector, and any other detail you share with us during the discovery call or onboarding process.

  • Payment information. Including card details and billing information, processed by our payment provider Stripe. Build Influence does not store or have direct access to your full card details. Stripe acts as a separate data controller for the payment card information you provide.

  • Information shared during a live engagement. Including LinkedIn profile information, content sign-offs, revenue declarations made under the £3,000 trigger mechanism, and any other information you share with us during a Build Influence engagement.

2.2 Information collected automatically

  • Technical information. Including IP address, browser type and version, device type, operating system, time zone setting and location data inferred from your IP address.

  • Usage information. Including pages visited on the Site, time spent on pages, click patterns, referring URLs and the path taken through the Site.

  • Cookie data. Including the cookie consent record (whether you have accepted, rejected or partially accepted cookies), and the data captured by the cookies you have consented to.

2.3 Client data we process on behalf of our clients

During a Build Influence engagement, we process personal data on behalf of the client under a separate Data Processing Addendum. This data may include the client's existing LinkedIn connections list, contact database, CRM records, audience data and prospect information.

In relation to this data, the client is the data controller and Build Influence is the data processor. Build Influence does not use this data for any purpose other than performing the services the client has engaged us to deliver. We do not share this data with any third party other than the service providers identified in section 7 of this Privacy Policy. We retain this data only for the duration of the engagement and for the periods set out in section 6.

3. The lawful bases on which we process your data

Under UK GDPR, every processing activity must have a lawful basis. The lawful bases we rely on are set out below.

Processing activity

Processing activity

Processing activity

Sending you the newsletter

Consent (UK GDPR Article 6(1)(a))

You have actively subscribed by entering your email address. You can withdraw consent at any time by clicking 'unsubscribe' in any newsletter email.

Sending you a lead magnet you have opted into

Consent (Article 6(1)(a))

You have requested the resource and we deliver it to the email address you provided.

Discovery calls and pre-engagement conversations

Legitimate interests (Article 6(1)(f))

Our legitimate interest in pursuing commercial conversations with prospective clients who have expressed an interest in our services.

Delivering the services you have signed up to

Contract (Article 6(1)(b))

Processing your data is necessary to perform the contract we have with you (the Launch Offer Agreement or Standard Accelerator Agreement).

Processing payments

Contract (Article 6(1)(b))

Processing your data is necessary to perform the contract we have with you (the Launch Offer Agreement or Standard Accelerator Agreement).

Operational communications to clients during an engagement

Contract (Article 6(1)(b))

Communicating with you about the work we are doing for you is necessary to perform the contract.

Records, accounting, tax and legal compliance

Legal obligation (Article 6(1)(c))

We are required by law to keep certain records of commercial transactions for accounting, tax and audit purposes.

Marketing to existing clients about related Build Influence services

Legitimate interests (Article 6(1)(f)) and the soft opt-in under PECR Regulation 22

We are required by law to keep certain records of commercial transactions for accounting, tax and audit purposes.

Security, fraud prevention and Site protection

Legitimate interests (Article 6(1)(f))

Our legitimate interest in protecting the Site, our systems and our clients from fraud, abuse and unlawful activity.

Non-essential cookies and analytics

Consent (Article 6(1)(a) and PECR Regulation 6)

We only set non-essential cookies if you have consented through the cookie banner on the Site.

4. How we use your personal data

We use the personal data we collect for the following purposes:

  • Providing the services you have requested or signed up to, including the Launch Offer, the Standard Accelerators, the Influence Circle membership, the newsletter and any lead magnet you have opted into.

  • Communicating with you about your enquiries, your engagement, your account and your payments.

  • Sending you the newsletter you have subscribed to, until you unsubscribe.

  • Booking and managing discovery calls, strategy calls and other meetings with you.

  • Processing payments through Stripe and managing the recurring subscription set up at the point of signing an engagement.

  • Operating the Site and analysing how visitors use it, where you have consented to analytics cookies.

  • Protecting the Site, our systems and our clients from fraud, abuse, unauthorised access and unlawful activity.

  • Complying with our legal, accounting, tax and regulatory obligations.

  • Building anonymised performance data, analytics summaries and case study material derived from Build Influence engagements, for the purposes of our own marketing, training and product development. Any case study material that is not anonymised is governed by the testimonial clauses in the relevant client agreement.

We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.

5. Cookies and tracking technologies

The Site uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit the Site. They allow the Site to remember your preferences, recognise you across visits, and help us understand how the Site is used.

5.1 Categories of cookies we use

  • Strictly necessary cookies. Required for the Site to function. These cookies do not require your consent because they are essential to the operation of the Site, including security, load balancing and remembering your cookie preferences.

  • Analytics cookies. Help us understand how visitors interact with the Site, which pages are most popular, where visitors come from, and how the Site is performing. We use these cookies only with your consent. Examples include cookies set by Google Analytics and by the GoHighLevel platform that hosts the Site infrastructure.

  • Functional cookies. Allow the Site to remember choices you have made (such as form fields you have completed) and provide enhanced features. Set only with your consent.

  • Marketing cookies. May be used to deliver more relevant advertising to you, including remarketing pixels from platforms such as LinkedIn and Meta. Set only with your consent. We currently do not run paid advertising as a primary acquisition channel, but we reserve the right to do so in future, in which case marketing cookies will be set only with your active consent through the cookie banner.

5.1 Categories of cookies we use

When you first visit the Site, you are shown a cookie consent banner. You can accept all cookies, reject all non-essential cookies, or customise your preferences by category. You can change your preferences at any time by clicking the cookie settings link in the footer of the Site.

You can also control cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Disabling cookies may prevent certain features of the Site from working as intended.

6. How long we keep your personal data

We keep your personal data only for as long as we need it, taking into account the purpose for which it was collected and any legal, accounting, regulatory or business reasons for retaining it. The retention periods we apply are set out below.

Data category

Retention period

Newsletter subscribers

Until you unsubscribe, plus six (6) months in our suppression list to ensure we do not contact you again without your consent.

Lead magnet opt-ins

Up to two (2) years from your last interaction with us, after which the record is deleted unless you have subscribed to the newsletter or become a client.

Discovery call prospects who do not sign up

Up to two (2) years from the date of the discovery call, after which the record is deleted unless you have become a client.

Client data (active engagement)

For the duration of the engagement and the related continuation period under the client agreement.

Client data (post-engagement)

Up to seven (7) years from the end of the engagement for accounting, tax and contractual purposes, in line with UK statutory record-keeping requirements. Personal data processed on behalf of the client is returned or deleted in accordance with the Data Processing Addendum.

Payment and transaction records

Seven (7) years from the date of the transaction, in line with UK accounting and tax law requirements.

Website analytics data (where consented)

Up to twenty-six (26) months from the date of collection, in line with Google Analytics default retention.

Cookie consent records

Up to twelve (12) months, after which you are asked to re-consent.

Testimonials and case study material

In perpetuity, in line with the perpetual marketing licence granted in the relevant client agreement.

7. Third parties we share your personal data with

Build Influence does not sell, rent, or trade your personal data. We do not share your personal data with third parties for their own marketing purposes.

We do share personal data with the following categories of third party service providers, all of whom are required by contract to process your personal data only on our instructions, to keep it confidential, and to apply appropriate technical and organisational security measures.

Provider

Purpose

Location of processing

GoHighLevel (HighLevel Inc)

Customer relationship management, newsletter delivery, lead magnet delivery, contract management, e-signature, payment recurring subscription processing, and automation infrastructure.

United States

Stripe

Payment card processing for fees payable under the Launch Offer Agreement and Standard Accelerator Agreement. Stripe acts as a separate data controller for the card data you provide. We do not store your card details.

United States, with UK and EU subsidiaries

LinkedIn

Where we are engaged to manage your LinkedIn presence under a client engagement, your LinkedIn account is the platform on which the work is performed. LinkedIn is a separate data controller for your account data.

United States, with UK and EU operations

Google (Analytics and Workspace)

Where consented, Google Analytics for Site analytics. Google Workspace for our internal email and document infrastructure.

United States, with EU operations

Professional advisers

Solicitors, accountants and other professional advisers where we need their advice in relation to our business.

Primarily United Kingdom

Regulatory and law enforcement bodies

Where we are required by law to disclose data, including HMRC, the Information Commissioner's Office, the police and courts.

United Kingdom and United Arab Emirates

We do not share personal data with any other third party for the purposes of their own marketing or commercial activities. If we ever need to add a new processor to this list, we will update this Privacy Policy and the effective date at the top of the document.

8. International data transfers

Build Influence operates across the United Kingdom and the United Arab Emirates. Our primary data controller is based in the United Arab Emirates (Build Influence FZCO). The Site and the GoHighLevel infrastructure that supports it is hosted on servers located in the United States. Several of our service providers (set out in section 7) are also based in the United States.

This means that your personal data may be transferred to, stored in and processed in countries outside the United Kingdom and the European Economic Area, including the United States and the United Arab Emirates. The data protection laws in these countries may not provide the same level of protection as UK GDPR.

Whenever we transfer your personal data outside the United Kingdom, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is in place:

  • We transfer data to countries that have been deemed by the UK government to provide an adequate level of protection for personal data.

  • Where we use certain service providers, we use Standard Contractual Clauses approved by the UK Information Commissioner's Office, which provide personal data with the same protection it has in the United Kingdom.

  • Where we use providers based in the United States, we rely on the UK Extension to the EU-US Data Privacy Framework, where the provider is certified under it, or on Standard Contractual Clauses where they are not.

You can request a copy of the safeguards we have in place for any specific transfer by contacting us at [email protected].

9. How we protect your personal data

Build Influence takes the security of your personal data seriously and applies the following technical and organisational measures to protect it:

  • All personal data is stored in password-protected systems with role-based access controls. Only authorised in-house Build Influence staff can access systems containing personal data, and access is limited to what each person needs to perform their role.

  • All systems require multi-factor authentication for access where the underlying platform supports it.

  • All personal data is encrypted in transit using industry-standard TLS encryption, and at rest where the underlying platform supports it.

  • Payment card data is processed by Stripe and is not stored on Build Influence systems. Stripe is certified to the highest level of payment card industry security standards (PCI DSS Level 1).

  • We do not store passwords in plain text. All passwords are encrypted, hashed and salted in line with industry standards.

  • We restrict the use of personal devices for accessing business systems and require all staff to follow our internal information security policy.

  • We use reputable third party providers (GoHighLevel, Stripe, Google) that maintain enterprise-grade security certifications and undergo regular independent security audits.

  • Our team is trained on data protection, information security and the requirements of UK GDPR.

  • We have a documented breach notification process. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within seventy-two (72) hours and notify you without undue delay where required by law.

Despite these measures, no system can be guaranteed to be completely secure. We continually review and improve our security practices, but the transmission of information over the internet is never fully without risk. You share your information with us at your own risk.

10. Your rights under UK GDPR

UK GDPR gives you a number of rights in relation to your personal data. These rights are:

  • The right to be informed. You have the right to be told how your personal data is being collected and used. This Privacy Policy provides that information.

  • The right of access. You have the right to ask for a copy of the personal data we hold about you (a 'subject access request').

  • The right to rectification. You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.

  • The right to erasure (the 'right to be forgotten'). You have the right to ask us to delete personal data we hold about you, subject to certain exceptions (such as where we need to keep records for legal or accounting reasons).

  • The right to restrict processing. You have the right to ask us to limit how we use your personal data in certain circumstances.

  • The right to data portability. You have the right to ask for a copy of your personal data in a structured, machine-readable format, and to ask us to transmit it to another provider.

  • The right to object. You have the right to object to our processing of your personal data, including the right to object to direct marketing at any time.

  • Rights in relation to automated decision-making. You have the right not to be subject to a decision based solely on automated processing, where that decision has a legal or similarly significant effect on you. We do not make any such decisions about you.

  • The right to withdraw consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

To exercise any of these rights, please email us at [email protected]. We will respond to your request within one calendar month. We may need to verify your identity before fulfilling your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (the ICO), which is the supervisory authority in the United Kingdom for data protection matters. You can contact the ICO at ico.org.uk, by phone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

11. Marketing communications

Where you have subscribed to our newsletter or opted into a lead magnet, you may receive email marketing communications from us about our services, content and offers. You can unsubscribe at any time by clicking the unsubscribe link in any email we send you, or by emailing us at [email protected].

Where you are an existing Build Influence client, we may contact you about related services we think you may be interested in, on the basis of our legitimate interests and the soft opt-in under PECR Regulation 22. You can object to this processing at any time using the unsubscribe link or by emailing us.

We do not send SMS marketing. We do not share your contact details with third parties for their own marketing purposes.

12. Children's data

The Site and the Build Influence services are not directed at, nor intended for use by, children under the age of eighteen (18). We do not knowingly collect personal data from children under eighteen. If we become aware that we have collected personal data from a child under eighteen, we will delete it promptly. If you believe we hold data about a child under eighteen, please contact us at [email protected].

13. Third party websites

The Site may contain links to third party websites, including LinkedIn, social media platforms, podcast platforms and other external sites. Build Influence is not responsible for the privacy practices or content of those third party sites. We encourage you to read the privacy policies of any third party sites you visit. This Privacy Policy applies only to personal data collected by Build Influence.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, the services we offer, or changes in data protection law. The most current version is always available on the Site. The effective date at the top of this document tells you when the Privacy Policy was last updated.

Where changes are material (for example, where we add a new category of processing, a new processor, or a new lawful basis), we will notify you by email (if we have your email address) or through a prominent notice on the Site before the changes take effect.

15. How to contact us

If you have any questions about this Privacy Policy, the way we handle your personal data, or you wish to exercise any of your rights under UK GDPR, please contact us:

Build Influence FZCO

IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates

Email: [email protected]

Website: www.build-influence.com

Build Influence FZCO · IFZA, Dubai Silicon Oasis · build-influence.com

Privacy Policy · Version 1 · May 2026