Who handles your information

CartCompound is operated under the Build Goat group by BUILD GOAT LTD in the United Kingdom, Build Goat LLC in the United States and Build Vista PVT LTD in Pakistan. Hamid Khan and Ahmad Khan manage website enquiries and marketing centrally for all three companies. Responsibility for this website’s personal information is shared between them.

  • BUILD GOAT LTD, registered in England and Wales, company number 15228000. Registered office: 124–128 City Road, London, EC1V 2NX, United Kingdom.
  • Build Goat LLC, a Delaware limited liability company. Address: 7209 Lancaster Pike, Ste 4 #3125, Hockessin, DE 19707, United States.
  • Build Vista PVT LTD, Pakistan. Operating and contact address: 113-B, Commercial Broadway, B, Block B DHA Phase 8, Lahore, 54940. This is not its registered office.

Contact [email protected] for enquiries or privacy requests relating to any of these companies.

Information you provide

When you enquire or request a call, we collect your name, email address, the service you select, your message and an optional store or website address. We use these details to understand the request, reply, arrange a conversation and prepare a proposal where appropriate. Please do not include passwords, payment details, customer records or other sensitive information.

A call request is not a confirmed booking. If you book through Calendly, that service also handles the scheduling details you provide there.

Technical and security information

Our hosting and security providers process connection information such as IP addresses, request times, browser information and security events to operate and protect the website. The enquiry service uses a necessary session cookie and short-lived security tokens. It keeps pseudonymous request references and outcome information to prevent repeated submissions and diagnose failures. It does not save the enquiry message in a website lead database.

Why we process it

We process enquiry information to take steps you request before a possible contract and, where appropriate, for our legitimate interests in answering business enquiries and managing our services. Necessary website security and abuse prevention support our legitimate interests in keeping the service reliable. We also process records where needed to meet legal obligations. You can ask us about the basis that applies to your information.

Services and people involved

Authorised members of our teams in the UK, US and Pakistan may handle your enquiry. We use Brevo to route website enquiries to our business inbox, Google Workspace for business email, Namecheap hosting and Cloudflare for website delivery and security. These providers process information needed to perform their services. We may also need to share information with professional advisers or authorities where required by law.

These services and our teams can process information in more than one country. The applicable arrangements depend on the service and location. Contact us if you need details about the recipients, processing locations or safeguards relevant to your information.

Analytics and marketing

Google Analytics and newsletter signup are disabled on this version of the website. Sending an enquiry or requesting a call does not subscribe you to marketing. We do not sell enquiry details.

How long we keep information

We review unsuccessful enquiries for deletion three years after the last meaningful contact and delete them sooner when no longer needed. Client contracts, invoices and records needed for legal or accounting purposes follow their own applicable retention requirements.

Enquiry request references and pseudonymous submission outcomes are kept for up to 30 days. Duplicate detection uses a 24-hour window and form rate limits use a 10-minute window. Session tokens expire after 30 minutes. Hosting, security and email providers also maintain operational records under their own service settings and obligations.

Your choices and rights

Depending on the law that applies, you may be able to ask for access, correction, deletion, restriction or a portable copy of your information, or object to particular processing. Where processing relies on consent, you can withdraw it. These rights can have exceptions, including records we must retain by law.

Email [email protected]. We may ask for enough information to verify the request. You can also raise a concern with your relevant data protection authority, including the UK Information Commissioner’s Office.

Links, children and changes

Maps, social profiles, AI tools and Calendly are external links. Opening them takes you to services with their own privacy policies. Our website and enquiry services are intended for business use, not for children. We update this policy when the website or our handling of information changes.