Who is responsible
Built Logic Ltd is the controller for personal information collected through AFTB.
Company number: 17273424
Registered office: 22-24 Berners Street, London, England, W1T 3LP
Privacy contact: hello@aftb.ai
Who this notice covers
This notice applies to website visitors, people who request an AFTB resource, prospective members, members and people who contact us. AFTB is for people aged 18 or over who use it for business or professional purposes.
Information we collect
- Your name, email address, telephone number and business contact details.
- Business details and answers supplied when you join, ask a question, attend a session or request a resource.
- Account and membership records, including access, attendance, support requests, preferences and cancellation status.
- Payment status, billing contact details and transaction references. Card details are handled by the payment provider, not stored by AFTB.
- Community profile details, posts, messages sent through the service, submitted examples and session contributions.
- Images, audio or video where a session is recorded after notice has been given.
- Technical information needed to operate and secure the service, including device, browser, IP address, log and consent records.
We normally receive this information from you. We may also receive payment status from Stripe, campaign information from our email provider and technical records from our hosting or member-platform providers.
Do not submit customer records, site addresses, access details, prices or confidential documents unless the information is needed, authorised and requested through an approved route.
Why we use it
| Purpose | Usual lawful basis |
|---|---|
| Respond to an enquiry or send a requested resource | Steps requested before a contract, legitimate interests and consent where required |
| Set up your account and provide membership, training, community access and support | Contract |
| Take payment, keep financial records and meet legal duties | Contract and legal obligation |
| Moderate the community, enforce the terms, prevent misuse and secure the service | Contract and legitimate interests |
| Understand and improve the website and membership | Legitimate interests, with consent for optional cookies or similar storage |
| Send optional marketing emails | Consent where required, or legitimate interests where the law permits |
| Record a session | Consent or legitimate interests, depending on the session and notice provided |
| Establish, exercise or defend legal rights | Legitimate interests and legal obligation |
Who can see or receive it
Other members can see information you choose to put in your profile or post in shared community spaces. Do not treat a community post as a private or confidential channel.
We use providers for hosting, email, payments, community access, course delivery, live sessions, customer support and business administration. The confirmed launch services currently include Cloudflare, Kit and Stripe. We will update this notice when the community, course and live-session providers are selected.
We may share the minimum information needed with professional advisers, insurers, regulators, courts, law-enforcement bodies or a buyer of the business where the law allows it.
International transfers
Some providers may process personal information outside the UK. Before live use, we review the provider and use an approved transfer route where required, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved contractual clauses.
How long we keep it
| Record | Retention period |
|---|---|
| Enquiries and resource requests | Until the enquiry is closed and no longer needed for follow-up, legal claims or suppression records |
| Membership, contract and support records | During membership and afterwards while needed for legal, accounting or dispute purposes |
| Payment and accounting records | Six years after the relevant financial year, or longer where the law requires |
| Community posts and submitted examples | For the life of the community or until deletion is reasonably requested, subject to legal and operational needs |
| Session recordings | The period stated when recording starts, then securely deleted or anonymised |
| Marketing records | Until you unsubscribe or object; a minimal suppression record may be kept afterwards |
| Security and consent records | As long as needed to protect the service and demonstrate the recorded choice |
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or transfer of your information, or object to how it is used. You may withdraw consent at any time where we rely on consent.
Direct marketing: You can unsubscribe using the link in any marketing email or email hello@aftb.ai to object. We will stop sending direct marketing, but may keep a minimal suppression record so the objection is respected.
Email hello@aftb.ai to make a request. We may need to confirm your identity. We normally respond within one month, subject to the extensions and exemptions allowed by law.
Security and decisions
We use proportionate technical and organisational measures to protect personal information. No internet service is completely secure, so members must also protect their account details and tell us promptly about suspected misuse.
AFTB does not use personal information to make solely automated decisions that produce legal or similarly significant effects.
Questions and complaints
Contact hello@aftb.ai first so we can investigate. You can also complain to the Information Commissioner's Office.
Changes
We will update this notice when the service, suppliers or legal requirements change. Material changes will be brought to members' attention.