Privacy Policy
Your privacy is important to us. This policy describes how ConstructBase collects, uses, and protects your personal information when you use our services.
Information We Collect
Personal Information
We collect information you provide directly to us, such as when you create an account, request our services, or communicate with us. This includes your name, email address, phone number, postal address, and any other information you choose to provide.
Usage Information
When you use our website or services, we automatically collect certain information about your device and usage patterns, including your IP address, browser type, operating system, referring URLs, and how you interact with our services.
Construction Project Data
If you use our construction management services, we may collect project-related information including site locations, construction specifications, timelines, budget details, and contractor information necessary for project management and coordination.
Data Collection Categories
-
1
Contact Information
Name, email, phone, address details
-
2
Technical Data
IP addresses, browser information, device identifiers
-
3
Project Details
Construction specifications, timelines, budgets
-
4
Communication Records
Email correspondence, support tickets, chat logs
How We Use Your Information
We use the information we collect for various purposes related to providing and improving our construction services, ensuring secure communications, and delivering exceptional customer experiences.
Service Delivery
To provide, maintain, and improve our construction management services, including project planning, contractor coordination, and timeline management.
Communication
To communicate with you about your projects, send important updates, respond to inquiries, and provide customer support when needed.
Analytics & Improvement
To analyze usage patterns, improve our website functionality, develop new features, and enhance the overall user experience.
Security & Fraud Prevention
To protect the security and integrity of our services, prevent fraud, and ensure compliance with applicable laws and regulations.
Legal Compliance
To comply with applicable laws, regulations, and legal processes, and to enforce our terms of service and other agreements.
Marketing Communications
To send you promotional materials, newsletters, and information about new services or features that may be of interest to you (with your consent).
Information Sharing and Disclosure
With Your Consent
We may share your information when you explicitly consent to such sharing, such as when you request referrals or agree to participate in case studies.
Service Providers
We work with trusted third-party service providers who assist us in operating our business, including cloud hosting providers, payment processors, and communication services. These providers are bound by strict confidentiality agreements.
Construction Partners
For project management purposes, we may share relevant project information with contractors, subcontractors, architects, and other professionals involved in your construction project, as necessary for project completion.
Legal Requirements
We may disclose your information when required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or the public.
Data Protection Measures
Encryption in Transit
All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
Access Controls
Access to personal data is restricted to authorized personnel only, with strict authentication and authorization protocols.
Regular Audits
We conduct regular security audits and assessments to ensure our data protection measures remain effective and up-to-date.
Data Minimization
We collect and retain only the data necessary for providing our services and complying with legal obligations.
Important: We never sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.
Data Security
We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards
- • End-to-end encryption for sensitive data
- • Multi-factor authentication systems
- • Regular security vulnerability assessments
- •
Operational Security
- • Employee background checks and training
- • Strict access controls and authorization
- • Regular security awareness programs
- • Incident response procedures
Data Management
- • Automated data backup and recovery
- • Secure data storage with redundancy
- • Data retention and deletion policies
- • Regular security audits and monitoring
Security Incident Response
In the unlikely event of a security breach affecting your personal information, we have established protocols to:
- • Investigate and contain the incident immediately
- • Notify affected users within 72 hours (where required by law)
- • Report to appropriate authorities and regulatory bodies
- •
Your Rights and Choices
You have important rights regarding your personal information. We are committed to helping you exercise these rights and maintaining control over your data.
Access Right
You can request access to the personal information we hold about you, including details about how your data is being used.
Correction Right
You can request correction of any inaccurate or incomplete personal information we have about you.
Deletion Right
You can request deletion of your personal information, subject to certain legal obligations and legitimate interests.
Portability Right
You can request a copy of your personal information in a structured, machine-readable format for transfer to another service.
Restriction Right
You can request restriction of processing of your personal information in certain circumstances.
Objection Right
You can object to processing of your personal information for direct marketing or legitimate interests purposes.
Withdrawal of Consent
You can withdraw your consent for data processing at any time, where processing is based on your consent.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided in the Contact Information section below. We will respond to your request within 30 days (or as required by applicable law).
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyze site usage, and provide personalized content and advertisements.
Essential Cookies
These cookies are necessary for the website to function properly and cannot be disabled. They are usually set in response to actions made by you.
Analytics Cookies
These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.
Marketing Cookies
These cookies track your browsing habits to show you relevant advertisements and measure the effectiveness of our marketing campaigns.
Cookie Management
Managing Your Cookie Preferences
Essential Cookies
Always active - required for site functionality
Analytics Cookies
Help us improve our website
Marketing Cookies
Used for personalized advertising
Third-Party Cookies
Browser Settings
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent.
International Data Transfers
Data Transfer Safeguards
When transferring your personal data internationally, we ensure adequate protection through appropriate legal mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission, and other legally recognized transfer mechanisms.
Adequacy Decisions
For transfers to countries with adequacy decisions from the European Commission, we rely on these decisions as the legal basis for international data transfers under applicable data protection laws.
Service Provider Agreements
All international data transfers to third-party service providers are governed by robust data processing agreements that include mandatory clauses for data protection, security, and user rights.
Transfer Locations
United Kingdom
Primary data center location for most user data storage and processing
European Union
EU-based cloud services for certain data processing activities
United States
US-based service providers with EU-US Privacy Shield certification
Canada
Canadian data centers for North American operations and backup storage
Data Protection Impact
We conduct Data Protection Impact Assessments (DPIAs) for international transfers to ensure appropriate safeguards are in place and to identify and mitigate potential risks to your personal data.
Contact Information
If you have any questions about this Privacy Policy or our data practices, please don't hesitate to contact us. We're here to help and address any concerns you may have.
Privacy Contact Details
Phone
+44 20 7589 3421
Monday - Friday: 7:00 AM - 6:00 PM GMT
Office Address
142 King's Road
Chelsea, London SW3 4RP
United Kingdom
By appointment only
Business Hours
Monday - Friday: 7:00 AM - 6:00 PM
Saturday: 8:00 AM - 4:00 PM
Closed on Sundays and UK public holidays
Data Protection Officer
For complex privacy matters or formal complaints, please request to speak with our Data Protection Officer who will respond within 72 hours.
Quick Links & Resources
Cookie Policy
Detailed information about our cookie usage
Terms of Service
Our terms and conditions for service usage
Contact Us
General inquiries and customer support
About ConstructBase
Learn more about our company and mission
Regulatory Authorities
If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.
UK: Information Commissioner's Office (ICO) - ico.org.uk
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notification of Changes
Email Notification
Significant changes will be communicated via email to registered users with a summary of key updates.
Website Notice
A prominent notice will be displayed on our website for 30 days following policy updates.
Version History
Previous versions of this policy remain available for reference through our website.
Effective Date & Version
Continued Use
By continuing to use our services after policy updates, you consent to the revised terms. If you disagree with changes, you may discontinue using our services.
This Privacy Policy is effective as of the date stated above and governs our collection, use, and protection of your personal information.
Have Questions? Contact Us