Privacy Policy
Date of Last Revision: April 6, 2025
This Privacy Notice applies to the Well Built Premium newsletter, the Well Built Deep Dive Archive (the “Archive”), the Well Built website (wellbuilt.solutions and wellbuiltnewsletter.com) (the “Sites”), and any consulting services offered by Well Built Solutions, LLC (“Well Built,” “we,” “us,” or “our”) (collectively, the “Services”). It describes how Well Built collects, stores, uses, and discloses personal data relating to:
- Users: individuals who subscribe to or access the Well Built newsletter, the Archive, or any other Well Built content (“Users”); and
- Prospects & Contacts: visitors of our Sites, individuals who engage with us commercially, event participants, and other prospective subscribers or customers (“Prospects”).
If you are a User or Prospect, please read this Privacy Notice carefully. You are not legally required to provide us with any personal data. If you do not wish to provide personal data or have it processed by us, please avoid interacting with the Services or Sites.
This Privacy Notice covers:
- Data Collection & Processing
- Data Uses
- Data Location
- Data Retention
- Data Disclosure
- Cookies and Data Collection Technologies
- Communications
- Data Security
- Data Subject Rights
- Additional Notices & Contact Details
1. Data Collection & Processing
When we use the term “personal data” or “personal information,” we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. It does not include aggregated or de-identified information maintained in a form not reasonably capable of being associated with an individual.
Types of personal data collected.
Well Built collects and generates the following types of personal data:
- Account & Identity Information: name, email address, job title, and organization/employer name;
- Billing & Payment Information: billing address and payment information processed through our third-party payment processor (such as Stripe); Well Built does not store full payment card details directly;
- Subscription & Usage Data: IP addresses and approximate location derived from IP addresses, device data (type, OS, browser version, locale and language settings), activity logs, content access records, cookies and pixels installed or utilized on your device, and inferred or derived data generated from your use of the Services;
- Content Request Submissions: ideas, suggestions, feedback, and requests submitted through our content request portal (currently powered by Canny or a similar third-party tool);
- Communications Data: personal data contained in your direct communications with us, including emails, support requests, and responses to our newsletters or surveys; and
- Consulting Engagement Data: contact details and professional information relating to individuals at organizations that engage Well Built for consulting services.
Categories of sources from which personal data is collected.
- Directly from you: when you subscribe, create an account, complete a purchase, submit a form, or interact with us at an event or by email;
- Automatically: when you visit our Sites or use the Services, including through cookies and similar technologies (described in Section 6); and
- From third parties: such as our email distribution platform (Beehiiv), payment processor, content request platform (Canny), or other service providers acting on our behalf.
California Notice at Collection.
For purposes of the California Consumer Privacy Act (“CCPA”), in the last twelve (12) months we have collected the following categories of personal information: Identifiers; Professional or Employment-Related Information; Internet or Other Electronic Network Activity Information; Customer Records Information; and Geolocation Information. We do not use or disclose sensitive personal information as defined in the CCPA. Our retention practices are described in Section 4; our disclosure practices are described in Sections 5 and 6.
2. Data Uses
We use personal data for the following purposes, relying on the lawful bases for processing identified below:
a. To deliver and operate the Services, including providing newsletter access, archive access, and consulting services. Lawful basis: performance of contract; legitimate interest.
b. To process payments and manage subscriptions, including billing, renewal, and subscription status management. Lawful basis: performance of contract.
c. To provide customer support and troubleshoot issues. Lawful basis: performance of contract; legitimate interest.
d. To communicate service-related information, such as billing notices, account updates, and subscription changes. Lawful basis: performance of contract; legitimate interest.
e. To send promotional and marketing communications, including newsletter issues, product announcements, and event invitations. Lawful basis: legitimate interest (for existing subscribers); consent (where required by applicable law).
f. To personalize and improve the Services, including understanding how Users interact with our content, analyzing usage patterns, and improving our editorial offerings. Lawful basis: legitimate interest.
g. To facilitate events, promotions, and subscriber programs, including founding subscriber perks, the Workday Rising event (if applicable), and similar initiatives. Lawful basis: legitimate interest; performance of contract.
h. To protect the security and integrity of the Services, including fraud prevention, account security, and compliance monitoring. Lawful basis: legitimate interest; legal obligation.
i. To comply with legal obligations and enforce our rights, including our Terms and Conditions of Use and Subscription Agreement. Lawful basis: legal obligation; legitimate interest.
j. To create aggregated or anonymized data for analytics and service improvement purposes. Such data is not personal data once rendered non-identifiable. Lawful basis: legitimate interest.
If you reside in a jurisdiction where consent is the only or most appropriate lawful basis for processing, your acceptance of our Terms and this Privacy Notice will be deemed your consent to the processing described above, unless applicable law requires a different form of consent. To revoke consent, contact us at privacy@wellbuiltsolutions.co.
3. Data Location
Well Built is based in the United States. We and our authorized service providers maintain, store, and process personal data in the United States. If you access the Services from outside the United States, your personal data will be transferred to and processed in the United States.
For Users and customers located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate safeguards for international data transfers where required, including Standard Contractual Clauses and supplementary measures as applicable. Well Built is committed to protecting personal data in accordance with this Privacy Notice and applicable law, regardless of where it is processed.
If you have questions about the safeguards applicable to transfers of your personal data, please contact us at privacy@wellbuiltsolutions.co.
4. Data Retention
We retain personal data for as long as reasonably necessary to maintain and provide the Services, comply with our legal and contractual obligations, and protect our interests in the event of a dispute. Retention periods are determined based on the nature and sensitivity of the data, the purposes for which it was collected, and applicable legal requirements.
Specifically:
- Subscriber data: is retained for the duration of the active subscription and for a reasonable period thereafter to support renewal, re-subscription, or legal compliance purposes.
- Payment and billing records: are retained for the period required by applicable tax and financial recordkeeping laws.
- Communications and support data: are retained for a reasonable period following the resolution of the relevant inquiry or engagement.
- Consulting engagement data: is retained in accordance with the terms of the applicable consulting engagement and applicable law.
When we have no ongoing legitimate business need to retain your personal data, we will delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup systems), we will securely isolate it from further processing until deletion is possible.
5. Data Disclosure
We do not sell your personal information. We may share personal data in the following circumstances:
Service Providers
We engage third-party companies and individuals to perform services on our behalf. These include: email distribution and newsletter delivery (Beehiiv); payment processing (Stripe or similar); content request management (Canny or similar); website hosting and infrastructure; analytics and performance measurement; and legal, financial, and compliance advisors (collectively, “Service Providers”). Service Providers have access to personal data only as necessary to perform their functions and are contractually required to protect it and use it only for authorized purposes.
We may share personal information for cross-context behavioral advertising via advertising cookies or pixels. You may opt out at any time via your browser’s cookie settings or a recognized opt-out signal (such as Global Privacy Control).
Consulting Clients
In connection with consulting engagements, we may share relevant contact and professional information with the client organization as necessary to perform the services. Any such sharing is governed by the applicable consulting agreement.
Business Transfers
If Well Built undergoes a merger, acquisition, sale of all or substantially all of its assets, or similar corporate transaction, personal data may be disclosed or transferred to the parties involved. We will provide notice if required by applicable law.
Legal Compliance and Protection
We may disclose personal data to government or law enforcement officials in response to a lawful subpoena, court order, or legal process, or where we believe in good faith that such disclosure is necessary to comply with applicable law, protect the rights or safety of Well Built or others, or prevent fraud or illegal activity.
With Your Consent
We may share personal data with third parties when you have provided explicit consent to such sharing.
For purposes of the CCPA, in the past twelve (12) months, we may have disclosed Identifiers; Professional or Employment-Related Information; Internet or Other Electronic Network Activity Information; Customer Records Information; and Geolocation Information to the categories of third parties described above.
6. Cookies and Data Collection Technologies
We and our Service Providers use cookies and similar tracking technologies for performance, analytics, and personalization purposes.
- Session Cookies: are temporary and are removed when you close your browser.
- Persistent Cookies: remain on your device for a set period and are used to remember your login details and preferences across sessions.
We may use analytics and marketing tools including Google Analytics and HubSpot. The specific tools we use may change; please contact us for the current list.
While we do not respond to Do Not Track (DNT) browser signals, we do honor legally recognized opt-out preference signals such as the Global Privacy Control (GPC) where required by applicable law. You can also manage cookies through your browser settings.
Please note that clearing your browser’s cookies or using a new device may also clear any opt-out preferences you have set, and you may need to re-set them.
7. Communications
Service Communications
We may contact you with service-related information, including billing notices, subscription updates, account security alerts, and password resets. You cannot opt out of service communications that are essential to your use of the Services.
Promotional Communications
We may send you newsletter issues, product updates, event invitations, and other communications we believe may interest you. If you do not wish to receive promotional communications, you may unsubscribe at any time by following the unsubscribe instructions in any promotional email, or by contacting us at privacy@wellbuiltsolutions.co.
We will provide you the opportunity to opt out of your personal data being used for direct marketing purposes or shared with third parties for materially different purposes than those described here. To exercise this right, contact us at privacy@wellbuiltsolutions.co.
8. Data Security
We use industry-standard physical, procedural, and technical security measures, including encryption where appropriate, to protect your personal data. However, no security system is impenetrable and we cannot guarantee the absolute security of your personal data. Please contact us immediately at privacy@wellbuiltsolutions.co if you believe your account or personal data has been compromised.
9. Data Subject Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
- Right to access: the personal data we hold about you, including the categories collected, sources, purposes, and third parties with whom we have shared it;
- Right to rectification: of inaccurate or incomplete personal data;
- Right to erasure: (“right to be forgotten”) of your personal data, subject to legal retention obligations;
- Right to restriction: of processing in certain circumstances;
- Right to data portability: where processing is based on consent or contract;
- Right to object: to processing based on legitimate interest, including for direct marketing;
- Right to opt out of “sale” or “sharing”: of personal data (as defined under the CCPA and similar laws); and
- Right to non-discrimination: for exercising your privacy rights.
To exercise any of these rights, contact us at privacy@wellbuiltsolutions.co. We may ask you to verify your identity before processing your request. We will respond within the timeframe required by applicable law.
You may designate an authorized agent in writing or through a power of attorney to submit requests on your behalf.
If your request is denied, you may appeal by replying to our decision or emailing privacy@wellbuiltsolutions.co with “Appeal” in the subject line. If your appeal is denied, we will provide information on how to contact your applicable state regulator or supervisory authority.
EEA and UK residents may also lodge a complaint with their local data protection supervisory authority — such as the supervisory authority in the EU Member State of your habitual residence, place of work, or of the alleged infringement, or the UK’s Information Commissioner’s Office (ICO).
Swiss residents may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Nevada residents may request that we do not sell their covered personal information by contacting us at privacy@wellbuiltsolutions.co. Well Built does not sell personal information as defined under Nevada law.
10. Additional Notices & Contact Details
Artificial Intelligence (AI) and Your Data
Well Built may use AI-assisted tools to support editorial and operational functions. We do not use AI for automated decision-making or profiling with legal or similarly significant effects on individuals. We do not use subscriber data to train or build our own AI models. Customer and subscriber data is not used to improve third-party AI systems beyond what is required for service delivery under our agreements with those providers.
Third-Party Platforms
Our Services are delivered in part through third-party platforms including Beehiiv (email distribution and newsletter delivery) and Canny (content request management). These platforms may collect and process certain data in connection with your use of the Services. We encourage you to review their respective privacy policies.
External Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. This Privacy Notice applies only to Well Built’s Services.
Children
Our Services are intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If we learn that we have collected personal data from a person under 18, we will promptly delete it. If you believe we have collected personal data from a minor, please contact us at privacy@wellbuiltsolutions.co.
Non-Discrimination
We will not discriminate against you for exercising any privacy right, including by denying services, charging different prices, or providing a different quality of service, except as permitted by applicable law.
Financial Incentives
We do not offer programs that provide a price or service difference in exchange for personal information. If that changes, we will describe the material terms and obtain your consent as required by applicable law.
Updates and Amendments
We may update this Privacy Notice from time to time. We will provide notice of material changes via email or through the Services. Your continued use of the Services following notice of an update constitutes your acceptance of the revised Privacy Notice. If you do not agree to the changes, you should discontinue use of the Services.
US State Privacy Laws
This Notice is intended to satisfy applicable disclosure requirements under the CCPA, the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Texas Data Privacy and Security Act (TDPSA), and other similar US state privacy laws. The categories of personal information we collect, the purposes for which we use it, and our retention and disclosure practices are described in Sections 1 through 5 above.
Contacting Us
If you have any questions or concerns about this Privacy Notice or our data practices, please contact us at:
Well Built Solutions, LLC
Email: privacy@wellbuiltsolutions.co
Website: wellbuilt.solutions