Privacy notice

APMBuild Ltd · data controller

This notice explains how APMBuild Ltd ("we") handles your personal data when you use Project Room, in line with UK GDPR and the Data Protection Act 2018. APMBuild Ltd (England & Wales) is the data controller.

1. What we collect

Your name and email address; the messages you send and receive; the documents and photos you upload or we share with you; a timestamped record of your acceptance of our Terms; and basic technical data needed to run the service (such as a sign-in session).

2. How we use it & our lawful basis

We use your data to run and coordinate your project — sharing documents and photos, communicating with you, and tracking progress. Our lawful bases are the performance of our contract with you and our legitimate interest in operating the service securely. Where we rely on consent (for example to send a notification), you can withdraw it at any time.

3. Who we share it with

We share what is necessary with the specialist partners assigned to your project (for example a certified energy assessor) — and only the information they need. We also use trusted service providers who process data on our behalf: Cloudflare (secure hosting and storage) and Google Workspace (email). We do not sell your data or use it for advertising.

4. International transfers

Our providers may process data outside the UK. Where they do, appropriate safeguards (such as the UK International Data Transfer Agreement / Addendum) apply.

5. How long we keep it

We keep your project information for as long as needed to deliver the project and to meet legal and accounting obligations, then delete it. You can ask us to delete your data sooner (see your rights).

6. Security

Access is passwordless (one-time secure links), data is encrypted in transit, documents and photos are held in private storage, and access is limited to you, APMBuild and the partners assigned to your project.

7. Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or object to the processing of your data, and to receive a copy in a portable format. To exercise any of these, email project_room@apmbuild.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Changes

We may update this notice; the current version always appears here.