Last updated: October 2026
The controller of your personal data is Braian Basanta, trading as BBuild (Double B Media, Bilderdijkkade 93D, 1053 VL Amsterdam, the Netherlands, KvK 99345153). You can reach me at braian@bbuild.org.
When you book a call, I collect what you enter in the form: your name, your business name and town, your email, your phone or WhatsApp number (optional), your Fresha link or website (optional), the services you're interested in, whether you run Google Ads now, your time zone and the page you booked from. For the free search check I only ask for your salon's name and town, your email and, if you like, your Fresha link or website; the form also sends your time zone and the page you sent it from, including the campaign that brought you there. Your IP address is used only briefly, to block repeated submissions. I use this data to arrange the call or send the check, and to follow up on it. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) of the EU GDPR and the UK GDPR).
If you run a salon, barbershop or beauty clinic, I may have emailed you about Google Ads for your business. I found your business email address on a public listing (Fresha, Google Maps or your own website), together with what that listing shows publicly, such as your salon's name, its town and where it appears on Google Maps. I use this data only to write to you about Google Ads for your business. The legal basis is my legitimate interest in offering my services to businesses (Article 6(1)(f) of the EU GDPR and the UK GDPR).
To work together I use your business contact details, our emails and your invoices, to perform our contract (Article 6(1)(b)) and to keep the records Dutch tax law requires (Article 6(1)(c)). To measure results I also see appointments and sales in Fresha (or your booking platform), which can include your customers' personal data. For that data you are the controller and I am your processor: I use it only on your instructions, to measure what the ads bring in, under a data processing agreement (DPA) we sign before I get access.
I use a few providers, who process data only on my instructions:
Some of them are based in the United States. Where data leaves the EU or the UK, the transfer is covered by the EU-US Data Privacy Framework (and its UK extension) or by standard contractual clauses.
I keep personal data only for as long as I need it:
You can ask me to delete your data at any time, unless the law requires me to keep it.
You have the right to access, correct, delete and port your data, and to restrict or object to its processing, including for outreach emails. Write to me at braian@bbuild.org and I'll reply within a month. If you think I've mishandled your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), to the authority in the EU country where you live or, in the UK, to the Information Commissioner's Office (ICO).
I use technical and organisational measures to protect your personal data against unauthorised access, loss or alteration.
For any questions about this policy, write to me at braian@bbuild.org.