Privacy Policy

Last updated: July 27, 2026
This Privacy Policy explains how I Build Business ("we," "us," or "our") collects, uses, shares, and protects your information when you use our website, online booking, online shop, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this Policy. This Policy works alongside our Terms of Service.

1. Who We Are & How to Reach Us

Business: I Build Business

Address: Ridgewood, NY

Phone: 347-685-2293

Email: kristi@ibuildbusiness.com

If you have questions about this Policy or your data, contact us using the details above.

2. Information We Collect

a. Information you provide directly

• Account details: name, email address, phone number, password, and (if enabled) Two-Factor Authentication settings and recovery codes.
• Booking details: appointment date/time, selected service or provider, waitlist requests, rescheduling activity, and any notes you provide.
• Purchase details: items ordered, order history, and billing/shipping information you enter in the shop.
• Communications: messages, inquiries, reviews, testimonials, and any content you submit (including through lead/contact forms).
• Promotions: offers you claim and related eligibility information.

b. Payment information
Payments are processed by Stripe. Your full card details are entered with and stored by Stripe, not on our servers. We receive limited information such as a payment token, the last four digits, card brand, and transaction status.
c. Information collected automatically

• Device & usage data: IP address, browser type, device information, pages viewed, and interactions with the Service.
• Cookies & similar technologies: used to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings; some features may not work without them.

d. Information from third parties

• If you use Google sign-in or Google Calendar integration, we receive information from Google that you authorize (such as your basic profile and calendar access).
• We may receive delivery/engagement information from our email and SMS providers.

3. How We Use Your Information

We use your information to:

• Create and manage your account, including Two-Factor Authentication.
• Process bookings, waitlists, rescheduling, and appointment reminders and confirmations.
• Process payments, deposits, penalty holds, refunds, and shop orders through Stripe.
• Send service-related communications (confirmations, reminders, account and security notices) by email and/or SMS.
• Operate our reliability policy, including tracking no-shows, late cancellations, strikes, and booking blocks.
• Display and manage reviews/testimonials and administer promotions.
• Respond to inquiries and manage leads.
• Maintain security, prevent fraud and abuse, and enforce our Terms.
• Comply with legal obligations and improve the Service.

4. Text Messages (SMS) & Sensitive/Health Information

• Text messaging (SMS) is not a fully secure or encrypted channel, so we intentionally limit the information included in text messages — for example, sending only the date and time of an appointment (such as "You have an appointment on [Date] at [Time]") rather than the specific service, reason for the visit, or any health-related details.
• Where a communication may involve protected health information (PHI) or other sensitive details, we use more secure channels such as email over TLS or a secure portal instead of SMS.
• To the extent our Service is used in a context covered by the Health Insurance Portability and Accountability Act (HIPAA) or similar laws, we work with our messaging and technology vendors under appropriate agreements (including Business Associate Agreements where required) and apply reasonable safeguards.
• Opt-out: Message and data rates may apply, and message frequency varies. You can opt out of non-essential text messages at any time by replying STOP; you may still receive essential transactional messages related to your bookings and account.

5. How We Share Your Information

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers / processors who act on our behalf, which may include: 
  • Stripe — payment processing.
  • SMS provider (e.g., our text-messaging vendor) — appointment reminders and notices.
  • Email provider — transactional and marketing emails.
  • Google — sign-in and calendar features you enable.
  • Hosting and infrastructure providers that store and serve the Service.
• Legal & safety: when required by law, subpoena, or to protect the rights, property, or safety of our users, the public, or us.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

These providers may also be subject to their own terms and privacy policies.

6. Cookies & Tracking

We use cookies and similar technologies for authentication, security, preferences, and analytics. You can manage or disable cookies in your browser, but doing so may affect functionality such as staying signed in.

7. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. Where applicable (for example, in HIPAA-related contexts), certain records may be retained for longer statutory periods.

8. Security

We use reasonable technical and organizational safeguards to protect your information, including:

• Encryption in transit (TLS/HTTPS).
• Support for Two-Factor Authentication (2FA); for staff/administrative accounts, multi-factor authentication may be required.
• Access controls and role-based permissions.
• Reasonable safeguards for sensitive fields and limited PHI over insecure channels (see Section 4).

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for safeguarding your login credentials and 2FA recovery codes.

9. Your Rights & Choices

Depending on where you live, you may have rights to:

• Access, correct, or update your personal information.
• Request deletion of your information.
• Opt out of marketing emails (via the unsubscribe link) and non-essential SMS (reply STOP).
• Request a copy of your information or ask us to restrict certain processing.

To exercise these rights, contact us at kristi@ibuildbusiness.com. We may need to verify your identity before responding, and some information may be retained where the law permits or requires.

10. Children's Privacy

The Service is intended for adults 18+. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Third-Party Links & Services

The Service may link to or rely on third-party sites and services such as Stripe, Google, and our messaging providers. We are not responsible for their privacy practices, and we encourage you to review their policies.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

Questions or requests about your privacy? Contact us at:

• I Build Business
• Email: kristi@ibuildbusiness.com
• Phone: 347-685-2293
• Address: Ridgewood, NY