PRIVACY POLICY

Last updated: May 8, 2026

1. Who we are

This Privacy Policy describes how Group Design Build, Inc. ("we," "us," "our") collects, uses, and shares personal information when you visit groupdesignbuild.com (the "Site") or interact with us through the Site.

2. Information we collect

Information you give us directly. When you fill out a contact form, email us, or otherwise communicate with us, we collect the information you provide — typically your name, email address, phone number, project location, and a description of your inquiry.

Information collected automatically. When you visit the Site, our hosting platform (Squarespace) and analytics provider (Google Analytics) collect technical information including your IP address, browser type, device type, operating system, referring URL, pages viewed, and timestamps. This information is used to operate the Site, troubleshoot issues, and understand how visitors use the Site in aggregate.

Cookies and similar technologies. The Site uses cookies and similar tracking technologies for site functionality, analytics, and preferences. See Section 5 below.

We do not knowingly collect special categories of personal data (e.g., racial or ethnic origin, health data, biometric data, financial account numbers). Please do not submit such information through the Site.

3. How we use information

We use the information we collect to:

  • Respond to inquiries and communicate with you about your project

  • Provide architectural and construction services if we enter into an engagement

  • Operate, maintain, and improve the Site

  • Understand visitor behavior in aggregate

  • Comply with legal and regulatory obligations

  • Protect the Site, our business, and our users from misuse

We do not use information collected through the Site for automated decision-making or profiling that produces legal or similarly significant effects.

4. How we share information

We do not sell personal information.

We may share personal information with:

  • Service providers who help us operate the Site, communicate with you, or run our business — including Squarespace (website hosting and form processing), Google (Workspace email and Analytics), Vimeo (video hosting), and similar vendors. These providers are bound by their own privacy and security obligations.

  • Professional advisors such as our attorneys, accountants, and insurers, when reasonably needed.

  • Government authorities when required by law, court order, or legitimate legal process.

  • In connection with a business transaction such as a merger, sale, or restructuring, in which case the recipient will be bound by terms at least as protective as this Policy.

5. Cookies and tracking technologies

The Site uses cookies in the following categories:

  • Strictly necessary cookies — required for the Site to function. Set by Squarespace.

  • Analytics cookies — used by Google Analytics to understand how the Site is used. These cookies collect information in aggregate and do not identify individuals to us.

  • Embedded content cookies — set by third parties such as Vimeo when you view embedded video.

You can disable cookies in your browser settings; some Site features may not work if you do. Where required by law (for example for visitors in the EU or UK), we will obtain consent before setting non-essential cookies.

6. Data retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law. Inquiry-form submissions that do not result in a project engagement are retained for approximately 24 months before deletion. If we enter into a project engagement, retention is governed by the project agreement and our professional record-keeping obligations.

7. Your rights

Depending on your location, you may have rights to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Request deletion of personal information

  • Object to or restrict certain processing

  • Receive a portable copy of your information

  • Withdraw consent for processing based on consent

To exercise any of these rights, contact us at info@groupdesignbuild.com. We will respond within the time required by applicable law and may need to verify your identity before fulfilling a request.

Massachusetts residents. Massachusetts data security regulations (201 CMR 17.00) apply to personal information of Massachusetts residents we collect. We implement administrative, technical, and physical safeguards appropriate to the size and complexity of our business.

California residents. If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, the right to delete, the right to correct, the right to limit use of sensitive personal information, and the right to opt out of sale or sharing of personal information. We do not sell personal information and do not knowingly share it for cross-context behavioral advertising.

EU/UK residents. If you are located in the European Economic Area, the United Kingdom, or Switzerland, our lawful bases for processing personal information are: (a) your consent, when you provide it; (b) the performance of a contract with you or steps taken at your request prior to entering into a contract; or (c) our legitimate interests in operating, securing, and improving the Site, where those interests are not overridden by your rights and freedoms. You also have the right to lodge a complaint with your local data protection authority.

8. Children's privacy

The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, alteration, disclosure, or destruction. No system can be completely secure, and we cannot guarantee absolute security.

10. International data transfers

Our service providers (Squarespace, Google, Vimeo) may store and process information in the United States and other countries. By using the Site you understand that your information may be transferred to and processed in jurisdictions whose data-protection laws may differ from your own. Where required, we rely on standard contractual clauses or other approved transfer mechanisms.

11. Updates to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and revise the "Last updated" date. Material changes will be communicated as required by applicable law, including by email to addresses you have provided to us where appropriate.

12. Contact

Questions, requests, or complaints about this Policy can be sent to:

Group Design Build, Inc. 425 Watertown St. Newton, MA 02458 info@groupdesignbuild.com +1 (617) 877-0155