Privacy
policy.
Plain English.
We treat data the way construction firms treat hi-vis — the boring discipline that keeps everyone safe. UK hosted, ICO registered, no third-party trackers, no ad-tech. This page tells you what we collect, why, and what you can do about it.
Who we are
Unibuild Software Ltd ("Unibuild", "we", "us") is a company registered in England and Wales, providing construction-management software to UK firms nationwide. For personal data you give us as a visitor, prospect or customer-admin, we are the controller. For personal data your team uploads into the platform (workers, subbies, photos), you are the controller and we are the processor under our Data Processing Agreement.
What we collect
If you visit the marketing site:
- Server access logs (IP address, user-agent, request URL, timestamp) for security and abuse prevention.
- Information you submit through forms — name, work email, company, phone, message — when you ask for a demo, quote or document.
If you sign up to the platform:
- Account data — name, work email, role, company, password hash.
- Usage data — pages visited inside the app, features used, errors, for product improvement and support.
- Customer data — anything your team puts into the platform (workers, sites, RAMS, payroll, photos). We process this on your instructions.
Why we use it
Each use has a UK GDPR Article 6 lawful basis:
- Contract — to deliver the service you signed up for.
- Legitimate interest — to keep the service secure, prevent fraud, improve the product, and reply when you contact us.
- Consent — for any marketing email beyond a direct response (you can withdraw at any time).
- Legal obligation — accounting records, statutory disclosures.
How long we keep it
Server access logs: 90 days. Marketing form submissions: 24 months from last contact. Customer account data: for as long as the account is active, plus 6 months post-termination for export, then deleted. Customer data inside the platform: under your control — we return or delete it on instruction at any time.
Who we share it with
We use a small number of UK or EU sub-processors:
- Amazon Web Services (eu-west-2, London) — hosting and storage.
- Fillout — the embedded demo-booking form on the marketing site.
- Google Fonts — typography (no cookies set, IP transmitted to load fonts).
The current sub-processor list and the Data Processing Agreement are in the security pack — request a copy at [email protected]. We do not sell personal data, ever.
Where it goes
All customer data is stored in the UK on AWS eu-west-2 (London) and does not leave the United Kingdom. Some sub-processors used for the marketing website may receive limited operational data (your IP when loading fonts, for example) routed through their own infrastructure — none of those flows include account or platform content.
Your rights
Under the UK GDPR you can ask us to: confirm what we hold about you; correct it; delete it; restrict or object to its use; receive a portable copy; or withdraw consent. Email [email protected] with "Data request" in the subject and we will respond within one calendar month. If you are unhappy with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
The marketing site does not set tracking, analytics or advertising cookies. Detail on what is and isn't set is on the cookies page.
Security
AES-256 at rest, TLS 1.3 in transit, role-based access, append-only audit log. Cyber Essentials Plus held, ISO 27001 in progress, penetration tested annually by a CREST-accredited firm. Detail on the security page.
Changes
When this policy materially changes we'll update the "last updated" date at the top and email account admins. Older versions on request.
Contact
Unibuild Software Ltd
12 Old Bond Street, Mayfair, London W1S 4PW
United Kingdom
[email protected] · +44 7587 557546