Privacy Policy.

Who we are

ConstructEther Limited is a company registered in England and Wales, company number 17074549. We provide ConstructEther, a construction operating system that runs the commercial and delivery lifecycle of a project in one platform.

For the purposes of UK GDPR, ConstructEther Limited is the data controller for personal data collected through our website and for account data held on the platform. Where you use the platform under an agreement with your own employer, your employer may be the controller for project and commercial data, and we act as processor on their instructions.

The data we collect

2.1 Personal data

• Name, job title, company name
• Email address and contact details
• Login credentials and account information

2.2 Technical data

• IP address, browser type and version, device information
• Usage data, including interactions with the platform

2.3 Project and commercial data

• Construction project data, drawings, specifications, and documentation
• Cost data, bills of quantities, valuations, and financial records
• Contractual information and correspondence

How we collect data

Directly from you when you:

• Register for an account or complete a form
• Upload documents or input data into the platform
• Communicate with us by email or through the platform

Automatically through:

• Cookies and tracking technologies
• System logs and analytics

From third parties:

• Integration partners such as cloud providers
• Your organisation, if access is provisioned on your behalf

How we use your data

4.1 To provide the services

• Create and manage user accounts
• Process construction data and generate outputs
• Enable collaboration and project delivery workflows

4.2 To improve the platform

• Analyse usage patterns and develop platform functionality
• Improve AI systems using anonymised, aggregated, or permission based datasets only

4.3 To communicate

• Respond to enquiries and provide service updates
• Deliver essential account related communications

4.4 Legal and compliance

• Comply with applicable legal obligations
• Enforce contractual rights and detect fraud or misuse

Lawful basis for processing

• Contractual necessity: to deliver the Services
• Legitimate interests: to improve, secure, and maintain the platform
• Legal obligation: to comply with applicable laws and regulations
• Consent: where required, for example marketing communications

Data security

We implement appropriate technical and organisational measures including:

• Encryption of data in transit and at rest
• Role based access controls and permissions
• Multi-factor authentication
• Secure cloud infrastructure within UK and EU regions where possible
• Continuous monitoring, logging, and security review processes

Data sharing

We do not sell personal data. We may share data only in the following circumstances:

• Service providers: trusted third parties supporting cloud hosting, infrastructure, and analytics
• Within your organisation: with authorised users within your project team
• Legal requirements: where required by law, regulation, or legal process

All third parties are contractually bound to maintain confidentiality and appropriate security standards.

International transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards including UK approved Standard Contractual Clauses and transfers only to jurisdictions deemed adequate by UK authorities.

Data retention

We retain data only for as long as necessary to provide the Services, fulfil contractual obligations, and comply with legal and regulatory requirements. Data may be retained for audit and dispute resolution purposes where required.

Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure, the right to be forgotten
• Restrict or object to processing
• Request data portability
• Withdraw consent where applicable

You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk. Requests can be made using the contact details in Section 01.

Cookies

We use cookies and similar technologies to enable essential platform functionality, analyse usage and performance, and improve user experience. Users can manage cookie preferences through browser settings.

AI and automated processing

ConstructEther uses AI to assist in processing construction and commercial data. Every AI output is a draft requiring human review and approval. No solely automated decisions with legal or similarly significant effects are made.

Changes to this policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last updated" date. Continued use of the platform constitutes acceptance of the updated policy.

Contact

For all privacy related enquiries: