BuiltByCrew Ltd. – Data Processing Agreement
Last updated: January 2025

This DPA forms part of the Terms of Service.

1. Roles

Client (Controller)

BuiltByCrew (Processor)

2. Subject of Processing

We process personal data of leads (homeowners) for:

Lead qualification

Appointment booking

CRM workflow execution

Reporting

3. Processor Obligations

We agree to:

Process data only on documented instructions

Maintain confidentiality

Use appropriate technical and organisational security measures

Notify the Controller of breaches within 72 hours

Assist with data subject requests

Delete or return data upon request

4. Sub-Processors

We use sub-processors such as:

Meta

Google

GoHighLevel

VAPI / AI phone systems

Stripe

CRM / hosting providers

A full sub-processor list is available upon request.

5. International Transfers

Data may be transferred to the EU/US under legal safeguards (Standard Contractual Clauses, adequacy decisions, etc.)

6. Termination

Upon termination, data is deleted within 30–90 days unless required by law.