📄 Read and download the full GDPR Compliance Policy on our trust portal:
https://trust.buildbetter.ai/resources?s=khy0s6atxmuealj7w7p01a&name=gdpr-compliance-policy-(en)

​

GDPR Compliance Policy Summary

Effective Date: January 1, 2023
Policy Owner: CEO

​

📌 Scope

This policy applies to all employees, contractors, and vendors of Build Better, Inc. with access to EU/EEA personal data.

​

🔐 Commitments

Build Better, Inc. ensures:

• Legal basis for all data processing
• Technical, physical, and administrative safeguards
• Access to personal data is strictly need-to-know
• Personal data is used only for authorized purposes
• Encryption in transit and at rest
• Secure disposal of all personal data
• No third-party transfers without a signed Data Protection Addendum (DPA)

​

🧑‍💼 Key Roles

• CEO / Policy Owner: Spencer Shulem
  📧 spencer@buildbetter.app | 📞 +1 (805) 680-6343
• Data Protection Officer (DPO): Spencer Shulem
  • Ensures GDPR compliance and internal monitoring
  • Reviews DPIAs, breach responses, and processing records
  • Acts as main contact for supervisory authorities

​

Article 27 Representatives

• EU Representative:
  Osano International Compliance Services Limited, Dublin, Ireland

• UK Representative:
  Osano UK Compliance LTD, Belfast, UK

​

🛠️ Data Protection Measures

• Encrypted storage & transmission
• Secure shredding (paper), wiping or destruction (digital media)
• Mandatory awareness training
• SAR/DSAR procedures established
• Maintains a Record of Processing Activity (RoPA) under Article 30

​

🔁 Data Subject Rights (DSAR/SAR)

Build Better, Inc. supports:

• Access, Rectification, Erasure, Restriction, Portability, Objection, and Consent withdrawal
• Requests handled via Privacy Page or privacy@buildbetter.ai
• Requests acknowledged within 3 days, resolved within 25 days
• Records of all SARs are maintained and auditable

​

🛡️ Breach & Disclosure

• Follows GDPR breach notification requirements
• All incidents reported to incidents@buildbetter.app
• Will notify affected data subjects when required
• External communications approved by CTO or DPO

​

📘 Enforcement & Reporting

• Responsible: CTO & CEO
• Noncompliance may result in disciplinary action, including termination
• Good faith reporting is protected

​

📅 Version History

📄 Read and download the full GDPR Compliance Policy on our trust portal:
https://trust.buildbetter.ai/resources?s=khy0s6atxmuealj7w7p01a&name=gdpr-compliance-policy-(en)