Privacy Policy

Last Updated: February 2026

1. Introduction

TB Two Build Ltd. ("we," "us," "our") takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, specifically the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable national data protection laws of the Republic of Cyprus (The Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data Law of 2018).

This Privacy Policy informs you about the nature, scope, and purpose of the collection and use of personal data when you visit our website twobuild.cc or use our services.

2. Controller

The "Controller" within the meaning of the GDPR and other national data protection laws is:

TB Two Build Ltd.Archiepiskopou Makariou III, 59MOUYIAS TOWER, 3rd floor, Flat/Office 3016017, Larnaca, Cyprus

Email: support@twobuild.ccWebsite: www.twobuild.cc

3. Data We Collect

We collect and process various types of personal data depending on how you interact with us:

• Technical Usage Data: When you visit our website, our servers (hosted by Webflow) automatically record information such as your IP address, browser type/version, operating system, referrer URL, and time of the server request.
• Contact Information: Name, email address, phone number, and company details provided via our contact forms (Typeform) or email.
• Project Data: Architectural plans, 3D models (DWG, Revit, etc.), sketches, and project specifications necessary for our rendering services.
• Scheduling Data: Information provided when booking a meeting via Calendly.
• Payment & Billing Data: Billing address, VAT number, and payment details required for invoicing.

4. Purpose and Legal Basis for Processing

We process your data strictly in accordance with Art. 6 GDPR based on the following legal grounds:

1. Performance of a Contract (Art. 6(1)(b) GDPR): To provide our architectural visualization services, process your orders, and manage contractual relationships.
2. Consent (Art. 6(1)(a) GDPR): Where you have expressly consented to specific processing (e.g., subscribing to a newsletter, loading third-party media like YouTube or Matterport via our Cookie Banner). You may revoke this consent at any time.
3. Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax, accounting, and other statutory obligations in Cyprus.
4. Legitimate Interests (Art. 6(1)(f) GDPR): To ensure the security and stability of our website, prevent fraud, and improve our services, provided these interests are not overridden by your fundamental rights.

5. Third-Party Services and Data Processors

To provide our services efficiently, we use selected third-party providers. We have entered into Data Processing Agreements (DPA) with these providers to ensure your data is protected.

5.1 Webflow (Hosting)

Our website is hosted by Webflow, Inc. (398 11th Street, 2nd Floor, San Francisco, CA 94103, USA). Webflow collects IP addresses and log files to ensure the security and performance of the site.

• Legal Basis: Legitimate Interest (Art. 6(1)(f) GDPR).

5.2 Typeform (Contact Forms)

We use Typeform S.L. (Carrer de Bac de Roda, 163, 08018 Barcelona, Spain) for our inquiries and questionnaires. Data entered into our forms is processed by Typeform to allow us to respond to your request.

• Legal Basis: Consent (Art. 6(1)(a) GDPR) and Pre-contractual measures (Art. 6(1)(b) GDPR).

5.3 Calendly (Scheduling)

To schedule meetings, we use Calendly LLC (BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA). When you book an appointment, your name, email, and selected time are transferred to Calendly.

• Legal Basis: Consent (Art. 6(1)(a) GDPR) and Pre-contractual measures.

5.4 Embedded Media (YouTube & Matterport)

We embed content from third parties to display videos and 3D tours. These providers may collect data (such as your IP address) if you interact with the content. We use a "Click-to-Load" solution (Cookie Banner), ensuring data is only transferred after you give your consent.

• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Matterport: Matterport, Inc., 352 E. Java Dr, Sunnyvale, CA 94089, USA.
• Legal Basis: Consent (Art. 6(1)(a) GDPR).

6. International Data Transfers

Some of our service providers (e.g., Webflow, Matterport, Calendly) process data in the USA. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection compared to EU standards.

To ensure the security of your data, we rely on:

• The EU-US Data Privacy Framework (DPF) for certified companies.
• Standard Contractual Clauses (SCCs) approved by the European Commission, which contractually oblige the provider to protect your data.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy.

• Project Data: Retained for the duration of the project and a reasonable archive period thereafter.
• Billing Data: Retained for 6 years (or longer) as mandated by Cypriot tax and accounting laws.
• Inquiries: Retained until the request has been fully processed, unless statutory retention periods apply.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request a copy of the data we hold about you.
• Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data.
• Right to Erasure (Art. 17 GDPR): Request deletion of your data ("Right to be forgotten"), subject to legal retention obligations.
• Right to Restriction (Art. 18 GDPR): Request limited processing of your data.
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.

To exercise these rights, please contact us at support@twobuild.cc.

If you believe that our processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority:Office of the Commissioner for Personal Data Protection (Cyprus)Kypranoros 15, Nicosia 1061, Cyprus.

9. Cookies

We use cookies to enhance your browsing experience. We use a Cookie Consent Manager to allow you to decide which cookies you wish to allow.

• Essential Cookies: Necessary for the website to function (cannot be disabled).
• Marketing/Functional Cookies: Used for embedding YouTube videos and Matterport tours. These are blocked by default until you click "Accept".

You can change your cookie preferences at any time via the settings on our website or your browser.

10. Data Security

We implement appropriate technical and organizational measures (TOMs) to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorized access. This includes the use of SSL/TLS encryption for our website (https://).

11. Changes to This Policy

We reserve the right to update this Privacy Policy to reflect changes in our services or legal requirements. The current version can always be found on this page.

‍