Privacy Policy
Last updated: June 10, 2026
Get My Website Built builds and hosts websites for local businesses. This Privacy Policy explains what information we collect when you visit this site, apply for a build, or become a customer, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. We aim to collect as little as possible and to be plain about what we do.
Who we are
Get My Website Built is operated by Blocka23 LLC, a Nevada limited liability company based in Las Vegas, Nevada. Blocka23 LLC, doing business as Get My Website Built, is the controller of the information described here. If you have any question about this policy or your information, contact us at jeno@getmywebsitebuilt.com.
Information we collect
Information you give us
When you submit our contact form or our get-started application, you choose what to share. Depending on the form, this can include your name, email address, phone number, business name, city and state, industry, the pages and features you want, links to sites you like, your current website, your timeline and budget notes, details about your logo, photos, brand colors, and hours, and how you heard about us. We use this to review your application, reply to you, and discuss building and hosting your site.
Information once you become a customer
If you start a subscription, we keep the records needed to deliver and bill the service: your business and contact details, the project and what is included, and your subscription and billing status. Your payment is processed by Stripe. We never see or store your full card number; Stripe handles card details directly and shares only limited information with us, such as the result of a charge and the last digits of the card.
Information collected automatically
We collect limited information about how the site is used, but only after you consent to analytics (see below). Until you consent, we do not run analytics, do not record your activity, and do not set analytics cookies.
Why we collect it (legal bases)
Where the laws of the EEA or UK apply, we rely on these legal bases:
- To take your application and provide the service you ask for. Reviewing your application, replying, and delivering and billing a subscription (performance of a contract, or steps taken at your request before a contract).
- Your consent. Analytics and session replay run only if you accept them, and you can withdraw consent at any time.
- Our legitimate interests. Keeping the site and our service secure, preventing abuse, and understanding what is useful so we can improve, in a way that does not override your rights.
- Legal obligations. Keeping invoices and tax and accounting records for as long as the law requires.
Analytics and cookies
We use PostHog for product analytics. Our PostHog instance is self-hosted on our own server, so we are a first-party processor of this data. Your analytics data is not sold or shared with a third-party analytics company, and analytics requests are served from this same site rather than an external tracking domain.
Analytics are off by default. Nothing is captured until you make an explicit choice in the consent banner. If you decline, or if your browser signals Do Not Track or Global Privacy Control, we keep analytics off and capture nothing. If you accept, we record a small set of usage events, such as which pages you view and which buttons you click, so we can understand what is useful and improve the site.
Session replay and input masking
With your consent, we may record an anonymized replay of how a visit moved through the site so we can see where pages are confusing. These recordings are masked. The contents of form fields, including text areas, are not recorded, so what you type into our forms (such as your name, email, phone, and message) is never captured in a replay. We configure this masking before any recording can start, not after.
IP address handling
We configure our analytics to discard your IP address. We do not store it alongside your analytics events, and we do not use it to build a location profile of you.
How long we keep analytics data
- Session replay recordings are kept for no more than 30 days.
- Analytics events are kept for no more than 12 months.
- After these periods, the data is deleted in the normal course of operating the instance.
Cookies we treat as strictly necessary
A small number of cookies are required for the site to work and are not used for analytics or advertising:
- dw_analytics_consent remembers whether you accepted or declined analytics, so we do not have to ask on every page. It also records the version of this policy your choice was made against, so if we materially change the policy we can ask you again.
- Stripe sets cookies on its checkout to process your payment securely and to help prevent fraud.
- Clerk authentication and session cookies, which are used only if you sign in to a Get My Website Built account, to keep you signed in and secure.
Because these are strictly necessary, the consent banner controls analytics only. It does not switch off the cookies needed to operate the site, to take payment, or to keep an authenticated session.
How we share information
We do not sell or rent your information, and we do not share it for cross-context behavioral advertising. We use a small number of trusted providers to run the business. Each receives only what it needs to perform its function, and each is bound by its own privacy terms:
- Stripe for subscription payments and billing. Stripe privacy policy.
- Resend to send transactional email, such as our reply to your application and your welcome message. Resend privacy policy.
- DigitalOcean for hosting the site and database in the United States. DigitalOcean privacy policy.
- Clerk for account authentication, used only if you sign in to a Get My Website Built account. Clerk privacy policy.
- PostHog, which we run self-hosted on our own DigitalOcean server, so your analytics data stays first-party and is not sent to PostHog as a third party.
We may also disclose information if the law requires it, to protect our rights or safety or those of others, or in connection with a sale or transfer of the business, in which case we will require the recipient to honor this policy.
How long we keep other information
- Application and lead information is kept while we review it and, if we work together, for the life of our relationship. If you ask us to delete it and we have no legal reason to keep it, we will.
- Customer, invoice, and subscription records are kept for the life of the service and for as long afterward as tax and accounting law requires, which is generally several years.
- When we no longer need information and have no legal duty to keep it, we delete or anonymize it.
Where your information is processed
We are based in the United States and our hosting and providers process information in the United States. If you contact us or apply from outside the United States, you understand that your information will be processed in the United States. Where a transfer of personal information is subject to EEA or UK law, we rely on appropriate safeguards, such as the relevant standard contractual clauses, for that transfer.
Your rights and choices
You are in control of analytics at all times: you can decline in the consent banner, and if you accepted earlier you can withdraw consent at any time using the cookie settings control in the site footer. After you withdraw, we stop capturing new analytics data.
Depending on where you live, you also have rights over the personal information we hold, which may include the right to:
- access a copy of your information;
- correct information that is wrong or out of date;
- delete your information;
- receive your information in a portable format;
- restrict or object to certain processing; and
- withdraw consent you previously gave.
If you are in the EEA or UK, you can also complain to your local data protection authority. If you are a California resident, you have the right to know what we collect, to request access and deletion, to correct your information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we will not discriminate against you for exercising any of your rights.
To exercise any of these rights, email jeno@getmywebsitebuilt.com. We will respond within the time the applicable law requires, and we may need to verify your identity before we act.
How we protect information
We use reasonable technical and organizational measures to protect the information we hold, including serving the site over HTTPS, verifying payment webhooks, limiting who can access stored data, and keeping secrets out of the code. No method of transmission or storage is perfectly secure, so we cannot promise absolute security, but we take care to reduce the risk.
Children
This site is intended for business owners and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this policy as the site and our practices change. When we do, we will revise the date at the top of this page. If we make a material change to how we handle analytics, we will also ask you to confirm your analytics choice again the next time you visit. Continued use of the site after a change means you accept the updated policy.
Contact
Questions, consent withdrawals, and access or deletion requests can all go to jeno@getmywebsitebuilt.com, or by mail to Blocka23 LLC, 4500 W Flamingo Rd, Suite 200, Las Vegas, NV 89103.