THE BUILD SESSION
Privacy Policy
Last updated: 15 October 2026 · MotionPlay Labs Ltd
1. Who we are
MotionPlay Labs Ltd (“we”, “us”) runs The Build Session workshop. Contact: justin@motionplaylabs.com. We are registered in the United Kingdom (company 17304660) and Nigeria (RC 9621200).
2. What applicant data we collect
When you apply we collect your full name, email address, country, WhatsApp number (optional), AI experience level, Claude subscription status, project goal, and fee currency. We also record your assessment outcome, payment status, and technical data needed for security (IP address, submission time).
3. How we use it
We use your data to assess your application, send transactional emails about your application and payment (via Resend), confirm paid seats, provide onboarding and workshop support, and meet legal and accounting obligations. We do not sell your data and we do not use it for unrelated marketing without your consent.
4. Payments
Card payments are processed by Stripe. We never see or store your full card number — Stripe handles it under its own privacy terms and shares only confirmation details (amount, receipt reference) with us. Manual transfers (e.g. NGN bank transfer) are confirmed by us and recorded as a receipt reference only.
5. Storage and sharing
Applicant records are stored in our application database (file store locally; Netlify Blobs in production) and transactional emails are sent through Resend. Data is shared only with these processors as needed to run the workshop, and with authorities where the law requires it.
6. Retention
Application records are kept for up to 24 months after the cohort so we can offer future-cohort places, handle refunds and disputes, and keep accounts. You may ask us to delete your record earlier (see §7); accounting records we must keep by law are retained as required.
7. Your rights
Subject to applicable law (including the UK GDPR and Nigeria Data Protection Act 2023), you may request access, correction, or deletion of your data, and may object to or restrict processing. Email justin@motionplaylabs.com and we will respond within 30 days. You also have the right to complain to your supervisory authority (e.g. the UK ICO).
8. Security
API keys and credentials live only in server-side environment settings — never in frontend code or the repository. Admin functions require a private token. No system is perfectly secure, but we limit access to applicant data to what is needed to run the workshop.