Privacy
Policy

01 Who we are

Built Pipeline ("Built Pipeline", "we", "us", "our") is the trading name of Pranav Anand, an individual operating as a sole proprietor from Bengaluru, Karnataka, India, and working with businesses located primarily in the United States. Built Pipeline is not an incorporated company and has no employees; "we" is used here simply as the voice of the business. This website is published at builtpipeline.com, which is our only website and our only email sending domain.

For the purposes of applicable data protection law, Pranav Anand (trading as Built Pipeline) is the person who decides why and how personal information is processed in connection with these services — the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, and the "controller" under the UK and EU General Data Protection Regulation where that applies.

You can reach us at any time at pranav@builtpipeline.com.

02 Scope of this policy

This policy explains how we handle personal information relating to three groups of people:

• Website visitors — anyone who opens builtpipeline.com.
• People who contact us — through our contact form or by email.
• Business contacts we reach out to — people at businesses we believe may benefit from an introduction.

It does not cover third-party websites we may link to. Those services have their own privacy policies, and we are not responsible for their practices.

03 Information we collect

Information you give us

When you use our contact form or email us, we receive the information you choose to provide: your name, your email address, your business name if you give it, the reason for your message, and the contents of the message itself. If we go on to work together, we will also hold the correspondence and notes relating to that work.

Information we collect about business contacts

For outreach, we hold a limited set of business contact details: a business name, a business email address, a publicly listed role or job title, a website address, a general location, and our own notes on whether the business appears relevant to a particular requirement. We do not seek or want personal information beyond what is needed to make contact in a professional capacity.

Information collected automatically

This website does not run analytics software, advertising pixels, session recording, or behavioural tracking of any kind. Our hosting provider records standard server logs, which typically include the IP address of the request, the time, the page requested and the browser user-agent string. These logs exist for security and reliability, are not linked to any individual by us, and are not used to profile visitors.

04 Where outreach contact details come from

We think this deserves its own section, because it is the question most people have when an unexpected email arrives.

Business contact details we use for outreach come from sources that are already public:

• A business's own public website, including a published contact or team page.
• Public business directories and listings.
• Public professional profiles where contact information is openly displayed.
• Information a person or business gave us directly, including at events or by referral.

We do not purchase or rent ready-made marketing lists, harvest private or gated information, or bypass any technical or contractual restriction to obtain contact details. We do not sell, share or otherwise make your details available for anyone else's marketing.

If you would like to know precisely where we obtained your details, email us and we will tell you.

05 Why we use information, and on what basis

We use personal information only for the following purposes:

• To respond to you when you contact us.
• To make and manage introductions between businesses, where both sides have agreed.
• To carry out limited, relevant B2B outreach to businesses we believe may benefit.
• To keep records of who has asked not to be contacted, so that we can honour that request.
• To meet legal, tax and accounting obligations that apply to us.
• To protect the security and integrity of our systems and communications.

Where Indian law applies, we process personal data for these lawful purposes on the basis of consent or of legitimate uses recognised under the Digital Personal Data Protection Act, 2023. Where the UK or EU GDPR applies to a recipient, our basis for B2B outreach is legitimate interests — specifically, our interest in offering a relevant business service and the recipient's interest in hearing about relevant suppliers or customers — balanced against the recipient's rights, and always subject to an immediate and permanent right to object. For contractual correspondence, our basis is performance of a contract or steps taken at your request prior to a contract.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not build advertising profiles.

06 Cookies and analytics

This website sets no cookies. We do not use Google Analytics, advertising pixels, remarketing tags, heatmaps, or any other visitor-tracking service. There is no cookie banner on this site because there is nothing to consent to.

For transparency, two third parties do receive a request when you use this site:

• Google Fonts serves the typefaces used on these pages. When your browser loads a font, Google receives the request, including your IP address. Google states that it does not use these requests to build advertising profiles.
• Formspree receives the contents of our contact form when you submit it, so that it can be delivered to our inbox. It is used only when you choose to submit the form.

Our hosting provider may also use strictly necessary security measures, such as rate limiting and bot protection, to keep the site available.

07 Who we share information with

We do not sell, rent, trade or licence personal information to anyone. Full stop.

We share information in only three situations:

• With a counterpart, when you have agreed to a specific introduction. Before any introduction is made, we tell you who the other party is and what will be shared. Nothing moves until you say yes.
• With service providers who operate our tools, and only so they can provide those tools to us. These currently include our website host, our email provider, and our contact form provider. They act on our instructions and are not permitted to use your information for their own purposes.
• Where the law requires it — for example in response to a valid legal order, or to establish, exercise or defend legal claims.

08 International transfers

We operate from India and correspond with businesses in the United States and elsewhere. The service providers we use may store or process information in the United States, the European Union or other countries. This means personal information may be transferred across borders.

Where such a transfer involves information protected by the UK or EU GDPR, we rely on appropriate safeguards — including the European Commission's Standard Contractual Clauses where our providers offer them — and we limit transfers to what is necessary to provide our service. If you would like details of the safeguards applied to your information, email us and we will provide them.

09 How long we keep information

• Enquiries that go nowhere: up to 12 months from the last contact, then deleted.
• Active correspondence and client records: for the duration of the relationship and up to 6 years afterwards, to meet legal, tax and accounting requirements.
• Outreach contact records: up to 24 months from the last meaningful contact, unless you ask us to delete them sooner.
• Opt-out records: kept indefinitely. This is deliberate — we retain the minimum needed (your email address and the date) precisely so that we never contact you again by mistake.
• Server logs: retained by our host for a short period, typically no more than 30 days.

10 Your rights and choices

Whatever jurisdiction you are in, we will honour the following requests. You do not need to cite a law, fill in a form, or explain yourself.

• Access — ask what information we hold about you.
• Correction — ask us to fix anything inaccurate or incomplete.
• Deletion — ask us to erase your information, subject to records we must keep by law and to the opt-out record described above.
• Objection — tell us to stop contacting you, for any reason or none.
• Withdrawal of consent — where we rely on consent, withdraw it at any time.
• Portability — ask for a copy of information you gave us, in a common format.
• Nominate — under Indian law, nominate another person to exercise your rights if you are unable to.
• Complain — raise a complaint with us, and with your local data protection authority.

If you are in California, we confirm that we have not sold or shared personal information as those terms are defined under the California Consumer Privacy Act in the preceding twelve months, and we do not process personal information for cross-context behavioural advertising. You will never be discriminated against for exercising a privacy right with us.

To exercise any of these rights, email pranav@builtpipeline.com. We respond within one business day wherever possible, and in any event within 30 days. We may ask a question to confirm we are dealing with the right person, but only where it is genuinely necessary.

11 Opting out of email

Reply to any email from us with the word stop, or write to pranav@builtpipeline.com. That is the whole process.

We remove the address permanently, usually the same business day and always within ten business days, as required by the United States CAN-SPAM Act. We do not charge a fee, require you to log in, ask you to state a reason, or ask you to visit a preference centre. You will not be added back to outreach later.

Every outreach email we send identifies who it is from, states that it is an approach from Built Pipeline, includes a valid physical postal address, and provides a working way to opt out.

12 Security

This website is served over HTTPS. We use reputable providers for email and hosting, keep access limited to those who need it, protect accounts with multi-factor authentication, and hold only the minimum information we actually need.

No method of transmission or storage is completely secure, and we will not claim otherwise. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by applicable law, without undue delay.

13 Children

Our service is for businesses and is not directed at children. We do not knowingly collect personal data of any person under 18 years of age. If you believe we hold such information, contact us and we will delete it.

14 Changes to this policy

If we change this policy, we will update the date at the top of this page and raise the version number. Where a change materially affects how we use information about you, we will say so clearly rather than quietly amending the text.

15 Contact and grievances

For any question, request or complaint about privacy, write to pranav@builtpipeline.com. Messages are read by a person, not a ticketing robot.

In line with India's Digital Personal Data Protection Act, 2023, this address is also our grievance redressal contact, and the person responsible for answering it is Pranav Anand. We acknowledge grievances within one business day and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

If you are in the UK or EU, you also have the right to complain to your national supervisory authority. If you are in the United States, you may contact your state Attorney General's office.

Postal address: Pranav Anand, trading as Built Pipeline, Bengaluru, Karnataka, India. Our full postal address is included in the footer of every email we send and is available on request.