Privacy Policy

Last updated: 6 October 2026

This policy explains how Liyaas Solutions Ltd ("BuilderBlack", "we", "us", "our") collects, uses and protects personal data when you visit builderblack.com, create a BuilderBlack account, or use our e-commerce platform and related services (the "Services").

1. Who we are

BuilderBlack is a trading name of Liyaas Solutions Ltd, a private limited company registered in England and Wales under company number 17017751. Our registered office is 112 West Pottergate, Norwich, England, NR2 4BW.

For personal data about our own customers, website visitors and partners, Liyaas Solutions Ltd is the data controller. You can contact us about anything in this policy at info@builderblack.com.

2. Our role when merchants use BuilderBlack

Merchants use BuilderBlack to run their own online stores. When a shopper buys from, or creates an account with, a store built on BuilderBlack, the merchant who runs that store is the controller of the shopper's personal data and decides how it is used. We process that data on the merchant's behalf, as their processor, under our Terms of Service.

If you are a shopper with a question about your data, please contact the store you bought from. We will help the merchant respond.

3. Personal data we collect

Information you give us

  • Account details: your name, email address, phone number, password (stored only as a secure hash) and the business details you enter, such as your business name, address and tax registration numbers.
  • Billing details: your billing address, plan and payment history. Card details are entered directly with our payment processor, Stripe. We never receive or store full card numbers.
  • Support and communications: messages you send us and anything you choose to include in them.
  • Partner details: if you build themes or apps for our marketplace, your partner profile and payout information.

Information collected automatically

  • Usage and device data: IP address, browser and device type, pages viewed, actions taken in the dashboard, and the date and time of each request, recorded in our server logs.
  • Cookies and similar technologies: see section 9.

Information from third parties

  • Payment status and fraud-prevention signals from Stripe.
  • Information from services you choose to connect to your store, such as payment gateways, shipping carriers, marketing tools and sales channels, as you authorise.

4. How we use personal data, and our legal bases

UK data protection law requires a lawful basis for each use of personal data. We use it:

  • To provide the Services, including creating and running your account and store, managing your subscription and giving support. Basis: performance of our contract with you.
  • To take payments and keep financial records. Basis: performance of our contract and compliance with legal obligations under tax and accounting law.
  • To keep the Services secure, including preventing fraud, spam and abuse and investigating misuse. Basis: our legitimate interests in protecting our platform, our merchants and their customers.
  • To improve the Services, by understanding how features are used and fixing problems. Basis: our legitimate interests.
  • To send service messages, such as billing notices, security alerts and important changes. Basis: performance of our contract.
  • To send marketing about BuilderBlack. Basis: your consent or, where the law allows, our legitimate interests. You can opt out at any time using the unsubscribe link in any message or by emailing us.
  • To comply with the law and respond to lawful requests from public authorities. Basis: legal obligation.

We do not sell personal data, and we never use shoppers' data from merchants' stores for our own marketing.

5. Who we share personal data with

We share personal data only where it is needed to run the Services, with providers bound by contracts that require them to protect it:

  • Amazon Web Services: cloud hosting, storage, backups and email delivery (Amazon SES).
  • Stripe: payment processing for BuilderBlack subscriptions and fees.
  • Email delivery providers such as Resend, used alongside Amazon SES to send account and order emails.
  • Google Maps Platform: address search and maps in features that use them.
  • AI service providers such as Anthropic and OpenAI, only when you choose to use an AI feature, and only the content you submit to it.
  • SMS and messaging providers, to deliver one-time passcodes and notifications that you or a merchant switch on.
  • Professional advisers such as accountants, auditors and lawyers, and public authorities where the law requires it.
  • A buyer or successor if our business is reorganised or sold, who must protect personal data as described in this policy.

When a merchant connects a third-party service to their store, for example a payment gateway, a shipping carrier, a WhatsApp or email marketing provider, or an advertising pixel, data passes to that service on the merchant's instructions and under the merchant's own agreement with it.

Our staff and contractors, some of whom are based in India, access personal data only where they need it to operate and support the Services.

6. International transfers

Our main servers are hosted by Amazon Web Services in Mumbai, India, and encrypted backups are copied to Amazon Web Services in the United States. Some of our providers and team members are also outside the UK.

Whenever personal data leaves the UK we make sure it stays protected, for example by using the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by relying on UK adequacy regulations where they apply.

7. How long we keep personal data

  • Account and store data: while your account is open and for a limited period afterwards so you can reactivate it or export your data. After that we delete or anonymise it, unless the law requires us to keep it.
  • Billing and tax records: six years from the end of the financial year they relate to, as UK law requires.
  • Server and security logs: only as long as they are needed to run and protect the Services.
  • Backups: deleted on a rolling schedule.

8. Security

We protect personal data with measures appropriate to the risk, including encryption in transit (HTTPS), encryption of stored integration credentials, hashed passwords, access controls and monitoring. No system is completely secure. If you think your account has been compromised, contact us straight away.

9. Cookies

builderblack.com and the BuilderBlack dashboard use only cookies and similar storage that are strictly necessary to run them, for example to keep you signed in, remember your choices and protect against abuse. These do not need your consent. We do not use advertising or analytics cookies on builderblack.com. If we add any in future, we will ask for your consent first.

Stores built on BuilderBlack may use their own analytics and advertising tools. Each merchant controls those, and BuilderBlack gives merchants a cookie consent banner to collect their shoppers' consent.

10. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to delete your data;
  • ask us to restrict how we use your data;
  • object to our use of your data, including for direct marketing;
  • receive your data in a portable format; and
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email info@builderblack.com. We will reply within one month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before you go to the ICO.

If you are in India

You also have rights under India's Digital Personal Data Protection Act, 2023, including the rights to access a summary of your data, to correct and erase it, to withdraw consent, to nominate someone to exercise your rights, and to have your grievances addressed. Send any request or grievance to info@builderblack.com and we will respond within the time the law allows.

11. Children

The Services are for businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children.

12. Data sources and attribution

To fill in the city and state from a PIN code at checkout, stores on BuilderBlack use postal code data from GeoNames, derived from the India Post directory and licensed under Creative Commons Attribution 4.0 (CC BY 4.0).

13. Changes to this policy

We may update this policy from time to time. We will publish the new version on this page with a new "last updated" date and, for significant changes, tell account holders by email or in the dashboard.

14. Contact us

Liyaas Solutions Ltd
112 West Pottergate, Norwich, England, NR2 4BW
Email: info@builderblack.com