Privacy Policy
Effective Date: March, 2026
Jurisdiction: United Kingdom
1. Who we are
CoBuildr ("we", "us", "our") operates the website and platform at cobuildr.co. We connect project owners with contributors through structured, time-boxed trials.
For questions about this policy or how we handle your data, contact us at support@cobuildr.co.
We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We only collect personal data that is necessary for the purposes described in this policy.
We do not collect payment information. We do not collect sensitive personal data such as health information, financial records, or government identification.
2. What data we collect
We collect the following personal data depending on how you use the platform.
When you post a project or submit an application, we collect your name or chosen display name, your email address, your LinkedIn or professional profile link, and any information you include in your project description or application responses, including your skills, availability, and motivations.
When you browse the platform, we collect technical data including your IP address, browser type, device type, and pages visited. This is collected automatically via analytics tools.
When you contact us directly, we collect your name, email address, and the content of your message.
3. How we use your data
We use your personal data for the following purposes.
To operate the platform and connect project owners with contributors, including service-related communications. When you submit an application to a project, your application details are shared with the project owner so they can review and respond to it. Your email address is only shared with a project owner if they accept your application, at which point it is included in an introduction email to facilitate direct communication. Once shared, your personal data is controlled by the receiving user. We encourage users to limit the personal data they share to what is necessary, and you should ensure you are comfortable sharing your information before proceeding.
To send you emails related to your use of the platform, including application notifications, project updates, and responses to your enquiries.
To improve the platform by analysing information about how users interact with it through aggregated and pseudonymised analytics data.
To comply with legal obligations where required.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
4. Legal basis for processing
Under UK GDPR, we rely on the following legal bases.
Contract performance: processing your data is necessary to provide the service you have requested, including submitting a project or application and facilitating introductions between matched parties.
Legitimate interests: we process technical and analytics data to understand how the platform is used and to improve it. We have assessed that our use of this data is proportionate, has minimal privacy impact, and is necessary to improve the platform. This does not override your rights or interests.
Consent: where we use analytics cookies, we do so only with your consent given through our cookie banner. Where processing is based on consent, you have the right to withdraw your consent at any time.
Legal obligation: where we are required to process data to comply with applicable law.
6. Analytics and cookies
We use Google Analytics to collect information about how users interact with the platform. This helps us understand which pages are visited, how long users spend on the site, and where visitors come from. Google Analytics uses cookies to collect this data.
A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies.
Essential cookies are necessary for the website to function. They cannot be disabled.
Analytics cookies are used by Google Analytics to collect aggregated and pseudonymised usage data. Analytics cookies are only set with your consent through our cookie banner. You can opt out of analytics cookies through our cookie banner or by using the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.
You can manage or delete cookies through your browser settings at any time. Note that disabling cookies may affect how the website functions.
7. Data retention
We retain your personal data for as long as necessary to provide the service and for a reasonable period afterwards in case of any disputes or legal obligations. We determine retention periods based on the nature of the data, the purpose for which it is processed, and any legal or regulatory requirements.
Project listings and application data are retained for the duration of the project and for up to 12 months following its conclusion.
If you contact us directly, we retain your correspondence for up to 24 months.
Analytics data is retained in aggregated and non-identifiable form.
You can request deletion of your data at any time by contacting support@cobuildr.co.
8. Your rights
Under UK GDPR you have the following rights regarding your personal data:
The right to access the personal data we hold about you.
The right to rectification if your data is inaccurate or incomplete.
The right to erasure, sometimes called the right to be forgotten, where there is no legitimate reason for us to continue holding your data.
The right to restrict processing in certain circumstances.
The right to data portability, to receive your data in a structured, machine-readable format.
The right to object to processing based on legitimate interests.
The right to withdraw consent at any time where processing is based on consent, including for analytics cookies.
To exercise any of these rights, contact us at support@cobuildr.co. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
9. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include encryption in transit, access controls, and restricted access to personal data limited to those who need it to operate the platform. We regularly review our security measures to ensure they remain appropriate.
No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we are committed to protecting your data to a reasonable standard.
10. International transfers
Some of our service providers, including those based in the United States, may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses approved by the UK Information Commissioner or adequacy decisions.
11. Children
CoBuildr is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us at support@cobuildr.co and we will delete it promptly.
12. Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page. For significant changes, we will notify users by email where we hold your contact details. We encourage you to review this policy periodically.
13. Contact
For any questions or requests relating to this privacy policy, your personal data, subject access requests, or complaints, contact us at support@cobuildr.co.
