How we handle your data.

Who we are

This site is operated by Echo Chain Ltd, a company in the United Kingdom, trading as Built By Ghosts. We design and build handcrafted websites for businesses. For anything in this notice, use the Get in touch form in the navigation above.

What we collect, and what we do not

The contact form stores nothing on our servers. It opens your own email client with the message you wrote; the only copy we receive is the email you choose to send. We keep enquiry emails in our mailbox for as long as the conversation needs.

The live build demo on the Watch It Build page sends the business details you type (business name, trade, town, style choices) to our build engine to generate the demonstration in front of you. These details are processed to run the demo, and the demo output exists for your session.

The “other trade” form does not store your details. Lead storage is switched off until consent capture is in place; the form tells you so and points you to email.

The build journey (the pages under /start, /preview, /edit and /checkout) collects the details you give us to build your site: your business information, content, images and contact details. We store these securely to assemble your preview, let you edit it, and fulfil your order. They are retained while your preview or order is active and deleted on request.

Hosting. The site is served by Netlify, which processes visitor IP addresses in its server logs as part of delivering the site, as our processor.

Cookies and analytics

We run no analytics and no tracking on this site, and we set no cookies. The only thing stored in your browser is your light/dark theme choice (a single value in your browser's local storage, never sent to us). That is why there is no cookie banner: there is nothing to consent to.

Artificial intelligence

The live build demo and parts of our build engine use AI systems to generate site copy and compositions. Where you interact with AI on this site, we say so on the page. Details you enter into the demo are processed by our AI provider to generate the output you see, and are not used to train models.

Lawful basis

Where we process personal data, we rely on: taking steps at your request before a contract (building and amending your site preview, responding to your enquiry), and our legitimate interest in operating and securing this site. We do not sell or share personal data for marketing.

Your rights

Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Use the Get in touch form in the navigation above and we will act on it promptly. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.