Legal
Privacy Policy
Last updated: 29 September 2026
This policy explains what personal data Proto Brand Builder collects, why, and what you can do about it. We've kept it as short and plain as we can.
1. Who we are
Proto Brand Builder is run by Protosoftware Ltd (trading as Proto Software), a company registered in Northern Ireland (company number NI639082), whose registered office is 154 Newtownsaville Road, Eskra, Omagh, Co Tyrone, BT79 0BR. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact us about privacy at info@protosoftware.co.uk. Our ICO registration number is ZA923679.
2. What we collect, and why
| What | Why we use it | Lawful basis |
|---|---|---|
| Account details: your name, email address and password. We store only a salted, one-way hash of your password, never the password itself. | To create your account, sign you in, and send password-reset emails. | Contract |
| Business details you enter: business name, tagline, industry, town, business email and phone, and social media handles. | To generate your brand kit, websites, graphics and captions. | Contract |
| Website content: the text, settings and photos you add in the website builder. | To save your websites so you can keep editing them and export them. | Contract |
| Post composer content: the text and photo you put on a social post. | Sent to our server only to draw the preview and download. We don't keep it. Your draft is saved in your own browser (see our Cookie Policy). | Contract |
| Enquiries: your name, email, domain and message when you ask us about business email, done-for-you setup or the Agency plan. | To reply to your enquiry and, if you go ahead, to set up what you asked for. | Steps before a contract / legitimate interests |
| Technical data: IP address, browser type and the pages you request, as recorded in server logs. | To keep the service secure, prevent abuse and fix problems. | Legitimate interests |
| Payment details (when paid plans launch) | Card payments will be handled by our payment provider. We never see or store your full card number. | Contract |
We don't sell your data, we don't use advertising trackers, and we don't make automated decisions that have legal or similarly significant effects on you.
3. Kit links contain your business details
To make brand kits easy to share without an account, the web address of a kit page includes the business details you entered (for example your business name, email and social handles). Anyone you share that link with can see those details, and the link may be kept in your browser history and in our server logs. If you'd rather not share a detail, leave it blank.
A website opened in the builder while you're logged in belongs to your account and only you can open it. A website opened while logged out can be opened by anyone who has its builder link, until you log in and open it, which saves it to your account.
4. Who we share data with
- Hosting: our servers and databases are hosted by [hosting provider], which processes data only on our instructions.
- Google Fonts (Google LLC): our pages, and websites made with Proto Brand Builder, load typefaces from Google Fonts. When they do, your browser connects to Google, which receives your IP address. See Google's privacy policy.
- Email delivery: if you ask to reset your password, our email provider delivers the message.
- Payments: when paid plans launch, our payment provider will process your payments.
- Legal requirements: we'll disclose data if the law requires it, or to protect the rights and safety of our users or others.
Links to social media profiles take you to those platforms, whose own privacy policies apply.
5. International transfers
Some providers, including Google, may process data outside the UK. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Agreement to protect it.
6. How long we keep it
- Account and websites: for as long as your account is open. When you delete a website or your account, we delete it from our live systems straight away. Copies in backups are overwritten within 30 days.
- Websites saved without an account: we may delete these after 12 months without changes.
- Server logs: up to 30 days, unless needed to investigate a security problem.
7. Your rights
Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, and receive it in a portable format. You can do some of this yourself:
- Download your data: Account settings → Download my data.
- Delete your account: Account settings → Delete account. This erases your account and all your websites.
For anything else, email info@protosoftware.co.uk. We'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
We use encrypted connections (HTTPS), store passwords only as salted hashes, pause sign-in after 5 failed attempts, and protect every form against cross-site request forgery. No system is perfectly secure, so please use a password you don't use anywhere else.
9. Children
Proto Brand Builder is a business tool for people aged 18 or over. We don't knowingly collect data from children.
10. Changes to this policy
If we make significant changes we'll update the date at the top and, where appropriate, tell you by email or when you log in.