Privacy notice
Last updated: 22 July 2026
1. Who we are
Flybuilt (“we”, “us”) is an EU-based agency helping small and mid-sized businesses with AI training, websites, and CRM. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for personal data we collect through this website and in the course of providing our services.
Contact: privacy@flybuilt.eu
Postal address: see our Imprint.
2. What we collect and why
- Contact form / email enquiries. Name, email address, company, and the content of your message. Lawful basis: our legitimate interest in responding to you (Art. 6(1)(f) GDPR), or pre-contractual steps at your request (Art. 6(1)(b)).
- Booked calls. Your name, email, and meeting details, processed by our scheduling provider on our behalf.
- Newsletter (if you opt in). Email address and consent record. Lawful basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Analytics (only if you opt in). Aggregated, non-identifying usage statistics. Nothing loads until you accept in the cookie banner.
3. Cookies
The site uses only strictly necessary storage by default (for example, remembering your cookie choice). Analytics and marketing cookies are off until you explicitly accept them. You can change your preferences any time by clearing your browser storage for this site.
4. Sharing your data
We do not sell personal data. We share it only with service providers acting on our behalf under a Data Processing Agreement, including hosting, email, and scheduling providers. Where a provider is outside the EEA, we rely on Standard Contractual Clauses or an adequacy decision as required by the GDPR.
5. AI tools we use
We use AI vendors (such as OpenAI, Anthropic, Google, and Mistral) as processors for internal drafting and customer projects. We have opted out of training on our data where the vendor supports it, and we do not paste identifiable personal data into consumer chatbots. If you provide personal data as part of a project, this is covered by our project-level DPA with you.
6. Retention
We keep enquiry data for up to 24 months after last contact. Customer records are kept for the duration of the engagement and up to 10 years for accounting purposes as required by law. Newsletter data is kept until you unsubscribe.
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Ask us to correct or delete it.
- Restrict or object to processing.
- Portability — receive your data in a common format.
- Withdraw consent at any time (for consent-based processing).
- Complain to your national Data Protection Authority. In Hungary this is the NAIH (naih.hu).
To exercise any of these rights, email privacy@flybuilt.eu. We respond within 30 days.
8. Security
We use industry-standard technical and organisational measures — encrypted transport, access controls, and regular reviews — proportionate to the risk of the data we hold.
9. Changes to this notice
We may update this notice from time to time. Material changes will be signposted here with a new “last updated” date.