BuildaPath Ltd Privacy Policy

BuildaPath Ltd ("BuildaPath", "we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you access or use the BuildaPath platform ("Platform") or interact with us.

This policy is provided in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. It should be read alongside our Terms and Conditions and Cookie Policy.

BuildaPath is the data controller in respect of personal data processed through the Platform, except in limited circumstances where we act as a data processor as described below.

If you have any questions about this policy or how your data is handled, you can contact us at: support@buildapath.co.uk.

We may collect and process personal data relating to you when you use the Platform. This includes account information such as your name, email address, login credentials and account preferences. It also includes usage data such as how you interact with the Platform, session activity, and device or technical information.

We also collect certain information automatically through cookies and similar technologies, including usage data, device information, and interaction data. Further details on how cookies are used are set out in our Cookie Policy.

Where you input or upload information to the Platform, this may include project-related data such as budgets, financial assumptions, quotes, notes, and planning information. To the extent that such information contains personal data, it will be processed in accordance with this policy.

We do not intentionally collect special category personal data. Users must not upload sensitive personal data such as health information, biometric data, or criminal offence data.

We use personal data to provide, operate, and maintain the Platform, including enabling user accounts, delivering functionality, and generating outputs such as budget modelling, liquidity projections, risk indicators, and confidence scoring. We also use personal data to improve and develop the Platform, including enhancing features, refining modelling logic, and generating anonymised benchmarking insights. Personal data may also be used to communicate with you, including account-related communications, service updates, and important notices. Where permitted, we may send relevant product or service communications.

We do not use personal data to make automated decisions that have legal or similarly significant effects on individuals.

Where you provide explicit consent, BuildaPath may use certain personal data, such as your name, project details, or related materials, for the purposes of case studies, testimonials, or marketing content. Such use will only occur with your prior consent and within the agreed scope of use. You may withdraw your consent at any time, and this will not affect any use of data that took place prior to withdrawal.

We process personal data on the basis that it is necessary for the performance of a contract, namely providing access to and operation of the Platform. We also process personal data where it is necessary for our legitimate interests, including improving the Platform, ensuring security, preventing misuse, and developing aggregated benchmarking insights. Where required by law, we rely on your consent, particularly in relation to non-essential cookies or certain communications. We may also process personal data where necessary to comply with legal obligations.

BuildaPath acts as a data controller in relation to account information, platform usage data, and the operation and improvement of the Platform, including the development of anonymised and aggregated benchmarking insights.

Where users upload personal data to the Platform, BuildaPath will generally process such data as an independent data controller because the Platform determines the structure and functionality of processing.

We do not sell personal data.

We may share personal data with trusted third-party service provides who support the operation of the Platform, such as hosting providers, infrastructure services, analytics providers, email delivery services, and payment processors. These providers are required to process personal data in accordance with applicable data protection laws and appropriate contractual safeguards.

We may also disclose personal data where required to comply with legal obligations or to protect our rights, property, or safety, or that of our users.

We may use personal data to create anonymised and aggregated datasets for the purposes of improving the Platform, developing benchmark comparisons, and generating statistical insights. Such data does not identify individuals or specific properties.

Aggregated benchmarking outputs are the exclusive property of BuildaPath and may be used for commercial, analytical, or research purposes.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing the Platform and complying with legal obligations.

Account data is generally retained for the duration of the user's account and for a reasonable period thereafter. Aggregated and anonymised data may be retained indefinitely as it does not identify individuals.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These measures include access controls, secure infrastructure, and monitoring of system activity.

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure.

Where personal data is transferred outside of the United Kingdom, we ensure that appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to ensure that personal data remains protected in accordance with applicable law.

Under applicable data protection laws, you have rights in relation to your personal data. These may include the right to access your data, request correction of inaccurate data, request deletion of your data, restrict or object to processing, and request data portability.

You also have the right to withdraw consent where processing is based on consent.

To exercise your rights, please contact us using the details provided in this policy.

If you have concerns about how your personal data is handled, we encourage you to contact us first so that we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or Platform functionality. Any updates will be published on our website, and continued use of the Platform constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

BuildaPath Ltd

Email: support@buildapath.co.uk