Who controls your information
Wayne Malyon trading as Built From One, 20 Shearers Drive, Spalding, PE11 3ZJ, United Kingdom, is responsible for the personal information described in this notice. For privacy enquiries or to exercise your rights, email hello@builtfromone.com.
This notice applies to the Build Your Story World service and the main Built From One website. BF1 Reads has its own privacy notice for reading accounts, subscriptions and album purchases.
Information we collect
When you contact us, we may receive your name, email, optional telephone number, preferred genre, story idea, files and any other details you choose to include. If we agree to a project, we may keep its approved brief, drafts, creative instructions, feedback, correspondence, deliverables, contract and invoice or payment references.
Website hosting may create standard technical and security logs, including connection details, to operate and protect the website. We do not ask for account passwords or full card details in the enquiry form.
Why we use information
We use enquiry details to answer you, assess suitability and take steps you request before entering a contract. We use project and contact information to provide a commissioned service under the contract. We use payment, invoicing and financial information to meet legal obligations. Limited operational and security records may be processed for legitimate interests in operating and protecting the service, subject to your rights.
Making an enquiry does not subscribe you to marketing emails. Any optional marketing will require a separately communicated choice and an easy unsubscribe route. We do not sell personal information or create advertising profiles through this website.
Story ideas and AI-assisted production
Your project materials may include original fiction, personal experiences or information about other people. Only send information you are entitled to share, and avoid unnecessary sensitive personal information in an initial enquiry. If a real person or private material must appear in the project, discuss this with us before sending full details.
Our production process may use third-party AI writing, editorial, image and music services under human direction. The tools, material to be processed, relevant provider terms and any international transfer safeguards should be identified in the agreed project documentation before client files are uploaded. We do not claim every tool has identical data-retention or AI-training settings.
Service providers and international processing
We use providers for website hosting, email and creative production. BF1 Reads identifies Railway for its application hosting and Namecheap Private Email for business correspondence; the main site and any new enquiry or payment integration must be checked against their actual configurations before launch. Where a payment provider is used, it processes payment information under its own privacy terms; we do not ask you to put card numbers in your story enquiry.
Provider systems may process information outside the UK. Where a restricted transfer is made, we assess and use an appropriate legal safeguard, such as applicable adequacy arrangements or suitable contractual terms. Contact us for information about safeguards relevant to your project.
How long we keep information
As a working policy, unsuccessful or inactive enquiries may be kept for up to 24 months after meaningful contact. Active project materials are kept while the service is being delivered and for a reasonable support period; completed project files and routine communications are normally reviewed for deletion within 24 months of completion, unless a longer period is agreed or necessary. Contracts, invoices and financial records are usually held for up to six years, or longer where a specific legal obligation or dispute requires it.
These periods must match the actual storage, email, backup and deletion processes at launch. Requests for justified earlier deletion will be considered individually. A third-party payment provider may keep its own separate records.
Your information rights
Depending on the circumstances and legal basis, you may request access, correction, erasure, restriction and portability, or object to certain processing. You can withdraw consent for purposes based on consent, and object to direct marketing at any time. Contact hello@builtfromone.com; we may verify identity proportionately and normally respond within one month, subject to lawful extensions.
Complaints, age and changes
Services and commissions are intended for people aged 18 or over. If you think a child has supplied personal information, please contact us. You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint without contacting us first.
We will update this notice if the service, provider arrangements or information uses change, and explain material new processing before it begins.