1. Who we are
Easy Building Designer ("EBD", "we", "us", "our") is an online 3D building design platform for metal building manufacturers, dealers, steel erectors and general contractors. EBD is owned and operated by ACT Building Systems, PO Box 3134, Richmond, Tasman 7020, New Zealand.This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to:our website at easybuildingdesigner.com and its subdomains, including the designer dashboard;the EBD 3D Building Designer, including versions embedded on our customers' websites;our advertising and lead forms on platforms such as Facebook, Instagram and LinkedIn; andany sales, support or marketing contact you have with us.We handle personal information in line with the New Zealand Privacy Act 2020, the Australian Privacy Act 1988 and Australian Privacy Principles, Canada's PIPEDA, and applicable US federal and state privacy laws. Where the EU or UK GDPR applies to you, we also follow it.
2. Our two roles
How we handle your information depends on how you interact with EBD.When you deal with us directly — visiting our website, filling in our contact form, booking a call, responding to our ads, or holding an EBD account — we decide how your information is used. We are responsible for it under this policy (under GDPR, we are the "controller").When you use a designer on another company's website — for example, designing a building and requesting a quote on a building dealer's or manufacturer's site that uses EBD — we provide the software on behalf of that company. That company (our "Customer") decides what happens with your design and quote request, and its own privacy policy governs how it uses your information. We process that information only to provide our service to the Customer and as they instruct (under GDPR, we are a "processor"). If you have a question or request about a quote you submitted, please contact the company whose website you used. If you contact us instead, we will pass your request on to them.
3. Information we collect
Please see the table at the end of this article. If you submit a lead form inside a Facebook, Instagram or LinkedIn ad, the platform shares the details you enter (usually name, email, phone and company) with us.We do not knowingly collect sensitive information, such as health information or government identification numbers. Please do not enter it into the designer or our forms.
4. How we use information
We use personal information to:
Provide the service: run the 3D designer, save and share designs, deliver quote requests and webhook data to our Customers, and manage accounts.
Respond to you: answer enquiries, hold demo calls, and provide customer support.
Bill and administer: invoice Customers, process payments, and keep business records.
Market EBD to businesses: send information about EBD to business contacts, and measure and improve our advertising on platforms such as Meta, LinkedIn and Google. We send marketing emails and messages only where anti-spam laws allow, including the US CAN-SPAM Act, Canada's Anti-Spam Legislation (CASL), Australia's Spam Act 2003 and New Zealand's Unsolicited Electronic Messages Act 2007. You can unsubscribe at any time.
Improve EBD: understand how the website and designer are used, fix problems, and develop new features. Where possible we use aggregated or de-identified data for this.Keep things secure and lawful: prevent fraud and abuse, protect our systems, enforce our terms, and meet legal obligations.We do not sell end-customer design or quote data, and we do not use the data our Customers' website visitors submit through the designer to market EBD to those visitors.
Text messages (SMS)
If you give us your mobile number and agree to receive texts, we may send you messages about your enquiry, demo bookings, your account, and EBD offers and updates. We may send texts through GoHighLevel and Calendly.
Consent: we only send marketing texts if you have agreed to receive them. Agreeing is not a condition of buying anything from us.
Frequency and cost: message frequency varies. Message and data rates may apply, depending on your mobile plan.
Opting out: reply STOP to any message to stop receiving texts. We will send one final message confirming you have opted out. Contact us using the details in section 12 if you have questions.
No sharing: we do not sell, rent or share your mobile number or text messaging consent with third parties or affiliates for their own marketing purposes. Mobile numbers are shared only with the service providers that help us send messages.Mobile carriers are not responsible for delayed or undelivered messages.
5. Cookies, pixels and advertising
We use cookies and similar technologies (such as pixels and tags) on our website.
They fall into four groups:
Functional: needed for the site and designer to work, for example keeping you logged in and remembering your cookie choices. These are always on.
Preferences: remember settings you choose.
Statistics: help us understand how visitors use the site, for example Google Analytics.
Marketing: help us show relevant ads and measure whether they work, for example the Meta Pixel (Facebook and Instagram), the LinkedIn Insight Tag, and Google advertising tags. Our marketing platform, GoHighLevel, may also set cookies that link form submissions and email activity (such as opens and clicks) to your contact record.Marketing tools let us see when someone who clicked our ad visits our site or contacts us, build audiences of past visitors so we can show them EBD ads on other platforms, and find similar business audiences. These platforms may combine this information with what they already know about you, under their own privacy policies:Meta: facebook.com/privacy/policyLinkedIn: linkedin.com/legal/privacy-policyGoogle: policies.google.com/privacyYour choices. Where required by law, we ask for your consent before setting statistics and marketing cookies. You can change your choices at any time using the cookie banner or our Opt-out preferences page. We honor Global Privacy Control (GPC) browser signals as an opt-out of targeted advertising where the law requires it. You can also manage ad preferences in your Meta, LinkedIn and Google account settings, block cookies in your browser, or install the Google Analytics opt-out add-on.
6. How we share information
We share personal information only as described here:
With our Customers: designs and quote requests submitted through a Customer's designer go to that Customer, by email and, if the Customer sets one up, by webhook to their CRM or other tools. Shared design links can be viewed by anyone who has the link.
With service providers who work for us under contract and may use the information only to provide their services: cloud hosting and storage, website hosting, marketing email and CRM (GoHighLevel), scheduling (Calendly), payment processing (Stripe), analytics (Google Analytics), cookie consent management (Complianz), and customer support tools.
With advertising platforms: Meta, LinkedIn and Google receive device and usage data through cookies and pixels, as described in section 5. If we upload a customer or contact list to create an ad audience, the platform matches it in hashed (scrambled) form and does not use it for other purposes.
Within our group: with ACT Building Systems and companies under common ownership, to run and support EBD.
For legal reasons: if required by law, court order or a government authority, or to protect the rights, safety or property of EBD, our users or others.
In a business transfer: if EBD or ACT Building Systems is sold, merged or reorganized, personal information may transfer to the new owner, who must continue to protect it under this policy.We do not sell personal information for money. Under some US state laws, using advertising cookies and pixels counts as "selling" or "sharing" personal information for targeted advertising. You can opt out as described in sections 5 and 9.
7. International transfers
ACT Building Systems is based in New Zealand, and our Customers are in the United States, Canada, Australia and New Zealand. Our service providers, including hosting providers and advertising platforms, may store and process information in the United States and other countries. This means your information may be handled outside the country where you live.When we send personal information overseas, we take reasonable steps to make sure it is protected to a standard comparable to New Zealand's Privacy Act and Australian Privacy Principle 8. For information from the EU, UK or Switzerland, we rely on adequacy decisions (New Zealand has an EU adequacy decision) or on Standard Contractual Clauses or similar safeguards with our providers.
8. How long we keep information, and how we protect it
We keep personal information only as long as we need it for the purposes in this policy:
Account data, saved designs and Customer settings: while the Customer's account is active. We delete upon Customer request.
Quote requests from a Customer's designer: for as long as the Customer keeps them in their account, and deleted with the account as above. Customers can ask us to delete specific quote requests at any time.
Sales and marketing contacts (including GoHighLevel records): up to 5 years after our last meaningful interaction with you, or until you ask us to delete them.
Website analytics: Google Analytics data is kept for 14 months.
Billing and tax records: 7 years, to meet New Zealand tax law and similar rules in our Customers' countries.
Cookies: for the periods shown in our cookie banner and Opt-out preferences page.We protect information with reasonable technical and organizational safeguards, including encrypted connections (HTTPS), access controls limited to staff who need it, and trusted hosting providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a privacy breach is likely to cause serious harm, we will notify affected people and the New Zealand Privacy Commissioner, and other regulators where the law requires.
9. Your privacy rights
Everyone. Wherever you live, you can ask us to:tell you what personal information we hold about you and give you a copy;correct information that is wrong or out of date;delete your information, unless we need to keep it for legal or legitimate business reasons; andstop sending you marketing emails, using the unsubscribe link in any email or by contacting us. To make a request, email info@easybuildingdesigner.com. We may need to confirm your identity first. We will respond within 20 working days, or sooner where local law requires. We will not treat you differently for using your rights.
New Zealand. You have rights of access and correction under the Privacy Act 2020. If you are unhappy with how we handled your request, you can complain to the Office of the Privacy Commissioner.
Australia. You have rights of access and correction under the Australian Privacy Principles, and you can deal with us anonymously or under a pseudonym where that's practical (for example, browsing the website). If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner.
United States. Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have the right to know, access, correct and delete personal information, to get a portable copy, and to opt out of the "sale" or "sharing" of personal information for targeted advertising. We do not sell or share customer data with third parties.
Canada. You can access and correct your information and withdraw consent to its use, subject to legal limits. You can also contact the Office of the Privacy Commissioner of Canada.
EU, UK and Switzerland. You also have the right to restrict or object to our processing, including for direct marketing; to data portability; and to withdraw consent at any time. You can complain to your local data protection authority.
Designer users on a Customer's website. For quotes or designs you submitted on another company's website, please send requests to that company. We will help them respond.
10. Children
EBD is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date, and if the changes are significant we will notify account holders by email or in the dashboard.
12. Contact us
For privacy questions, requests or complaints:
ACT Building Systems (Easy Building Designer)
PO Box 3134, Richmond, Tasman 7020, New Zealand
Email: info@easybuildingdesigner.com
Phone: (833) 330-5540Last updated: October 13, 2026