Privacy Notice
Version 2026-10-16 · Updated 16 October 2026
Who holds your information
Mimik Studios Ltd, New Zealand, operates builtby and is responsible for personal information we hold. Contact our privacy officer through Get in Touch and select the most relevant topic; state “Privacy request”. This notice explains our practices and does not ask you to waive privacy rights.
What we collect and why
We collect account names, email addresses, account role, authentication records and your acceptance of our Terms; profile and portfolio information you choose to submit; messages and attachments; enquiries, reviews and proposals; and technical/security information needed to operate and protect the service. We use this to provide accounts and listings, connect members, prevent abuse, respond to enquiries and meet legal obligations. Passwords are stored as hashes, not readable passwords. If you use Google sign-in, we receive the identity details needed to sign you in. If you request identity verification, we collect the document you submit and the outcome of the review for that purpose. Do not upload unnecessary sensitive information or another person’s document. Providing required account information is necessary to create an account; optional information can be omitted, although related features may not work.
Public information and private information
Published profiles, portfolio work, public reviews and selected account display details can be viewed by others and may be indexed by search engines. Messages and project details are shared with the relevant participants. Authorised administrators may access records where needed for support, moderation, identity review, security or legal obligations. Identity documents are not displayed on your public profile; access is restricted to you and authorised administrators. Information supplied to a tradie or customer may also be handled independently by that person. Only share what they need.
Service providers
We use Cloudflare to host builtby and store account information and uploaded files. Configured email and sign-in providers may process information needed to deliver those features. builtby does not collect card details or process project payments.
Cookies and emails
Essential cookies support sign-in and account security, and browser storage supports preferences and some preview tools. Transactional emails include account security, verification, messages and other service information. Any optional marketing must be handled separately with applicable consent and unsubscribe rights. Accepting the signup Terms is not consent to unrelated marketing.
Retention, backups and removal
We keep information only as long as reasonably needed for the stated purpose, including account operation, recovery, security, disputes and legal recordkeeping. An expired paid plan may leave excess portfolio items stored privately so that upgrading can restore them. Request deletion or account closure through Get in Touch; we may retain records still reasonably needed for legal, financial or dispute purposes and explain relevant restrictions. Restricted backup copies may remain after removal from the active service and are not used for ordinary public display. Backups and recovery measures reduce risk but cannot guarantee complete recovery. We periodically assess retention needs. Keep independent copies of your work.
Security and privacy incidents
We use reasonable access controls and security measures, but no online service is risk-free. Report suspected unauthorised access promptly through Get in Touch. We will investigate and take reasonable containment and recovery steps. If a breach has caused or is likely to cause serious harm, we will notify the Privacy Commissioner and affected people as required by the Privacy Act 2020. Contractual outage or liability wording does not remove those duties.
Access, correction and complaints
You may request access to personal information we hold about you, ask for correction, and ask us to attach a statement of correction if a correction is not made. We may verify your identity proportionately before releasing information. We will respond within the time required by New Zealand law and explain any lawful refusal or extension. You may complain to our privacy officer through Get in Touch and may also contact the Office of the Privacy Commissioner at privacy.org.nz. We will notify material changes to this notice; a new purpose requiring further consent will not be authorised simply by changing this page.