Privacy Policy

In short: We collect what you give us through our forms and booking calendar, plus basic analytics. We use it to reply, deliver your website and support you. We never sell your data, and we never share your mobile number or text-messaging consent with third parties for marketing. Email [email protected] to access or delete your data.

1. Who we are

PrebuiltWebMarket ("we", "us") builds, hosts and maintains prebuilt websites for local businesses in the United States and Australia. This policy covers prebuiltwebmarket.com and the services we provide. For any privacy question, email[email protected].

2. What we collect

Details you give us: your name, business name, email, phone number, country, industry, the design and package you are interested in, and anything you write in a message, when you use our contact form, booking calendar or email us.
How you found us: the page you came from, the first page of your visit and any campaign (UTM) tags in the link, so we know which marketing works.
Client information: if you buy a plan, the content, logos, photos and account details needed to build and run your website, and billing records.
Usage data: pages viewed, approximate location, device and browser, collected through Google Analytics 4 and our hosting provider's security logs.

3. How we use it

To reply to your enquiry and hold the calls you book.
To build, host, maintain and support your website, content and CRM.
To send invoices and service messages about your account.
With your consent, to send occasional updates and offers. You can opt out at any time.
To understand and improve our website and services, and to keep them secure.

4. Text messaging (SMS)

If you give us your mobile number and agree to receive text messages, we may text you about your enquiry, appointments, your account and, if you opted in, occasional offers. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are excluded from all of the sharing described in this policy and will not be shared with any third parties.

We do not sell or rent your personal information. We share it only with service providers who help us run our business, under confidentiality obligations:

GoHighLevel (LeadConnector): our CRM, where form enquiries and calendar bookings are stored and managed.
Cloudflare: hosting, security and delivery of our website.
Google Analytics: website usage statistics.
FormSubmit: a backup email service used only if our CRM cannot be reached when you submit a form.
Payment processors and email providers for billing and correspondence.

We may also disclose information where the law requires it, or to protect our rights, clients or the public.

6. Cookies and analytics

We use essential cookies and Google Analytics cookies. Our booking calendar is provided by GoHighLevel, which may set its own cookies when it loads. You can block or delete cookies in your browser settings, and opt out of Google Analytics with Google's opt-out browser add-on.

7. How long we keep it

Enquiries that do not become clients: up to 24 months, then deleted.
Client records: while your plan is active, then for as long as tax and accounting law requires (usually up to 7 years).
Analytics data: according to our Google Analytics data-retention setting, up to 14 months.

8. Your rights

Depending on where you live, including under US state privacy laws such as the California Consumer Privacy Act and the Australian Privacy Act 1988, you can ask us to access, correct, delete or export your personal information, or to stop using it for marketing. Email [email protected] and we will respond within 30 days. We will not treat you differently for exercising these rights. If you are in Australia and unhappy with our response, you can contact the Office of the Australian Information Commissioner (OAIC).

9. Security and international transfers

Our website is served over HTTPS, and access to personal information is limited to people who need it to do their job. Our service providers may store data in the United States or other countries, with safeguards in place. No system is completely secure, but we work to protect your information and will tell you if a breach affects you.

10. Children

Our services are for businesses. We do not knowingly collect personal information from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version, and we will email clients about material changes.

12. Contact

Questions or requests about your privacy? Email [email protected].