Privacy Policy.

Who We Are

ConstructEther is a UK-based software platform providing AI-powered construction management solutions, founded and led by John Ellis — a Quantity Surveyor with over 25 years of UK construction experience and in excess of £275 million in delivered works.

The Data We Collect

2.1 Personal Data

• Name, job title, company name
• Email address and contact details
• Login credentials and account information

2.2 Technical Data

• IP address, browser type and version, device information
• Usage data, including interactions with the platform

2.3 Project & Commercial Data

• Construction project data, drawings, specifications, and documentation
• Cost data, BoQs, valuations, and financial records
• Contractual information and correspondence

How We Collect Data

Directly from you when you:

• Register for an account or complete a form
• Upload documents or input data into the platform
• Communicate with us by email or through the platform

Automatically through:

• Cookies and tracking technologies
• System logs and analytics

From third parties:

• Integration partners such as cloud providers
• Your organisation, if access is provisioned on your behalf

How We Use Your Data

4.1 To Provide the Services

• Create and manage user accounts
• Process construction data and generate outputs
• Enable collaboration and project delivery workflows

4.2 To Improve the Platform

• Analyse usage patterns and develop platform functionality
• Optimise AI systems using anonymised, aggregated, or permission-based datasets only

4.3 To Communicate

• Respond to enquiries and provide service updates
• Deliver essential account-related communications

4.4 Legal & Compliance

• Comply with applicable legal obligations
• Enforce contractual rights and detect fraud or misuse

Lawful Basis for Processing

• Contractual necessity — to deliver the Services
• Legitimate interests — to improve, secure, and maintain the platform
• Legal obligation — to comply with applicable laws and regulations
• Consent — where required, for example marketing communications

Data Security

We implement appropriate technical and organisational measures including:

• Encryption of data in transit and at rest
• Role-based access controls and permissions
• Multi-factor authentication (MFA)
• Secure cloud infrastructure within UK/EU regions where possible
• Continuous monitoring, logging, and security review processes

Data Sharing

We do not sell personal data. We may share data only in the following circumstances:

• Service providers — trusted third parties supporting cloud hosting, infrastructure, and analytics
• Within your organisation — with authorised users within your project team
• Legal requirements — where required by law, regulation, or legal process

All third parties are contractually bound to maintain confidentiality and appropriate security standards.

International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards including UK-approved Standard Contractual Clauses and transfers only to jurisdictions deemed adequate by UK authorities.

Data Retention

We retain data only for as long as necessary to provide the Services, fulfil contractual obligations, and comply with legal and regulatory requirements. Data may be retained for audit and dispute resolution purposes where required.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Request data portability
• Withdraw consent where applicable

You also have the right to lodge a complaint with the Information Commissioner's Office. Requests can be made using the contact details in Section 01.

Cookies

We use cookies and similar technologies to enable essential platform functionality, analyse usage and performance, and improve user experience. Users can manage cookie preferences through browser settings.

AI & Automated Processing

ConstructEther uses AI to assist in processing construction and commercial data. AI outputs are advisory and require human review. No solely automated decisions with legal or significant impact are made.

Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last Updated" date. Continued use of the platform constitutes acceptance of the updated policy.

Contact

For all privacy-related enquiries: