> ## Documentation Index
> Fetch the complete documentation index at: https://docs.buildbetter.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# GDPR Compliance Summary

> Summary of Build Better, Inc.'s GDPR Compliance Policy

> **📄 Read and download the full GDPR Compliance Policy on our trust portal:**\
> [https://trust.buildbetter.ai/resources?s=khy0s6atxmuealj7w7p01a\&name=gdpr-compliance-policy-(en)](https://trust.buildbetter.ai/resources?s=khy0s6atxmuealj7w7p01a\&name=gdpr-compliance-policy-\(en\))

# GDPR Compliance Policy Summary

**Effective Date:** January 1, 2023\
**Policy Owner:** CEO

## 📌 Scope

This policy applies to all employees, contractors, and vendors of Build Better, Inc. with access to **EU/EEA personal data**.

## 🔐 Commitments

Build Better, Inc. ensures:

* Legal basis for all data processing
* Technical, physical, and administrative safeguards
* Access to personal data is strictly **need-to-know**
* Personal data is used only for **authorized purposes**
* Encryption in transit and at rest
* Secure disposal of all personal data
* No third-party transfers without a signed **Data Protection Addendum (DPA)**

## 🧑‍💼 Key Roles

* **CEO / Policy Owner:** Spencer Shulem\
  📧 [spencer@buildbetter.app](mailto:spencer@buildbetter.app) | 📞 +1 (805) 680-6343
* **Data Protection Officer (DPO):** Spencer Shulem
  * Ensures GDPR compliance and internal monitoring
  * Reviews DPIAs, breach responses, and processing records
  * Acts as main contact for supervisory authorities

### Article 27 Representatives

* **EU Representative:**\
  Osano International Compliance Services Limited, Dublin, Ireland

* **UK Representative:**\
  Osano UK Compliance LTD, Belfast, UK

## 🛠️ Data Protection Measures

* Encrypted storage & transmission
* Secure shredding (paper), wiping or destruction (digital media)
* Mandatory awareness training
* SAR/DSAR procedures established
* Maintains a **Record of Processing Activity** (RoPA) under Article 30

## 🔁 Data Subject Rights (DSAR/SAR)

Build Better, Inc. supports:

* Access, Rectification, Erasure, Restriction, Portability, Objection, and Consent withdrawal
* Requests handled via [Privacy Page](https://buildbetter.ai/privacy) or **[privacy@buildbetter.ai](mailto:privacy@buildbetter.ai)**
* Requests acknowledged within **3 days**, resolved within **25 days**
* Records of all SARs are maintained and auditable

## 🛡️ Breach & Disclosure

* Follows GDPR breach notification requirements
* All incidents reported to **[incidents@buildbetter.app](mailto:incidents@buildbetter.app)**
* Will notify affected data subjects when required
* External communications approved by CTO or DPO

## 📘 Enforcement & Reporting

* **Responsible:** CTO & CEO
* **Noncompliance** may result in disciplinary action, including termination
* **Good faith reporting** is protected

## 📅 Version History

| Version | Date        | Description    | Author         |
| ------- | ----------- | -------------- | -------------- |
| 1.0     | 10-AUG-2023 | Initial policy | Spencer Shulem |

> **📄 Read and download the full GDPR Compliance Policy on our trust portal:**\
> [https://trust.buildbetter.ai/resources?s=khy0s6atxmuealj7w7p01a\&name=gdpr-compliance-policy-(en)](https://trust.buildbetter.ai/resources?s=khy0s6atxmuealj7w7p01a\&name=gdpr-compliance-policy-\(en\))
