Privacy Policy

BidBuild is the data controller for the personal information described here. If you have any questions about this policy or your data, email us at [email protected].

• Account details: your name, email address and password (stored only in encrypted, hashed form — we can never see it).
• Google sign-in: if you choose “Continue with Google”, Google shares your name, email address and profile photo with us. We use these only to create and sign in to your BidBuild account. We do not get access to your Google password, contacts, emails or any other Google data.
• Profile: your trade, years of experience and bio, if you add them.
• Jobs and bids: job titles, descriptions, budgets, locations and categories you post, and the amounts and messages in bids you place.
• Messages and files: questions sent before bidding, chat messages after a bid is accepted, and any files or photos you attach.
• Subscription and payments: payments are handled by Stripe. We store your Stripe customer reference, subscription status and renewal date. Your card details go directly to Stripe — we never see or store them.
• Technical information: basic server logs (such as pages requested and error reports) used to keep the site secure and working.

• To create and manage your account and let you sign in (contract).
• To show your jobs to builders, show your bids and profile to customers, and deliver messages between you (contract).
• To run your free trial and builder subscription and take payments through Stripe (contract).
• To keep the site secure, prevent misuse and fix problems (legitimate interests).
• To meet legal obligations, such as keeping financial records (legal obligation).

We do not sell your personal information and we do not use it for advertising.

Jobs you post (including the location you enter) and your name are visible to other signed-in users. When you bid, the customer sees your name, bid and profile. Pre-bid questions are visible only to you and the customer. After a bid is accepted, the chat is visible only to the customer and the chosen builder. The site administrator can view content where needed to run the site, resolve disputes and prevent misuse.

• Stripe — payment processing for builder subscriptions.
• Google — only if you choose to sign in with Google.
• Our hosting provider (Abacus.AI) — hosts the website, database and uploaded files on our behalf.

These providers act under contract and only process data to provide their service to us. Some may process data outside the UK; where they do, they use legally approved safeguards such as standard contractual clauses. We may also disclose information if required by law.

We only use essential cookies needed to keep you signed in and to protect forms against misuse. We do not use advertising or tracking cookies. Stripe may set its own cookies on its checkout pages to process payments securely.

We keep your account information for as long as your account is open. If you ask us to delete your account, we will delete or anonymise your personal information within 30 days, except where we must keep certain records (for example, payment records, which are kept for up to 6 years for tax purposes).

You have the right to:

• access the personal information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information;
• object to or ask us to restrict how we use it;
• receive a copy of your information in a portable format.

To use any of these rights, email [email protected]. You can update your profile and password yourself on your Profile page. If you signed in with Google, you can also remove BidBuild's access in your Google Account settings.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Passwords are hashed, the site uses encrypted (HTTPS) connections, and access to messages and files is limited to the people involved in each job. No system is completely secure, but we work to protect your information.

BidBuild is intended for adults aged 18 and over. We do not knowingly collect information from children.

We may update this policy from time to time. The date at the top shows when it was last changed.