LEGAL
Privacy Notice
This notice explains how We Build Worlds handles personal information when you visit the website, contact us, receive marketing, create an account, buy a map or use a hosted map.
Last updated: 25 August 2026Who is responsible for your information
We Build Worlds is the controller of the personal information described in this notice.
Contact We Build Worlds: hello@we-build-worlds.com or +44 7438 451371.
Information we collect
- Contact and account information: name, business name, email address, phone number, password hash and account activity.
- Enquiries and sales information: messages, map requirements, campaign history and communications preferences.
- Map and catalogue content: business details, locations, descriptions, websites, logos and images you provide or ask us to publish.
- Payment and contract information: package, billing interval, payment status and Stripe references. We Build Worlds does not receive your full payment-card number.
- Technical information: IP address, browser and device information, security logs, cookie preferences and, where you consent, website and map usage information.
- Public business information: details from business websites, OpenStreetMap and other public sources when we identify or contact relevant businesses.
Why we use it and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Answer enquiries and take steps requested before a contract | Contract steps and legitimate interests in responding to potential customers |
| Create accounts, provide maps, host content, take payment and support customers | Contract and legitimate interests in operating the service |
| Prevent fraud, secure the service and keep necessary records | Legitimate interests and legal obligations |
| Measure website or map use with optional analytics | Consent for device storage/access; legitimate interests for consented, proportionate analysis |
| Send relevant business-to-business marketing | Legitimate interests where the rules allow, or consent where required |
| Establish, exercise or defend legal claims | Legitimate interests and legal obligations |
Business marketing
We may contact relevant corporate businesses using publicly available business contact details where we reasonably believe our services may be relevant. Every marketing email identifies We Build Worlds and offers a simple way to opt out. We treat sole traders and certain partnerships as individual subscribers and only email them where we have valid consent or another lawful exception. If we cannot tell, we use the more protective approach.
You have an absolute right to object to direct marketing at any time. Use the unsubscribe option in an email or contact us. We may keep the minimum information needed on a suppression list so we respect your choice.
Who receives information
We use carefully selected service providers for hosting, databases and storage (including Cloudflare), payments (Stripe), email delivery (Brevo), analytics (Google, only after consent), maps and place data. We may also disclose information to professional advisers, authorities or a buyer of the service where lawful and necessary. Providers may only use information to supply their services to us.
International transfers
Some providers may process information outside the UK. Where this happens, we rely on an adequacy decision or approved contractual safeguards and, where appropriate, additional protections. Contact us if you want more information about the safeguard used for a particular provider.
How long we keep information
We keep information only for as long as needed for the purpose collected. Account and service information is normally kept while the service is active. Contract, payment and essential transaction records may be kept for up to six years after the relationship ends for tax, accounting and legal claims. Enquiries are normally reviewed after 24 months without meaningful contact. Uploaded content is removed or anonymised when no longer needed, subject to backup cycles and legal claims. Analytics retention follows the configured service period and is reviewed periodically.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to our use of your information. Where we rely on consent, you may withdraw it at any time without affecting earlier use. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. Please contact us first if you are comfortable doing so—we would like the opportunity to resolve the issue.
Automated decisions and children
We do not use personal information to make solely automated decisions with legal or similarly significant effects. The service is intended for businesses and adults, not children.
Changes to this notice
We may update this notice when the service or law changes. Material changes will be highlighted on the website or communicated directly where appropriate.