Privacy Policy | Constructipay

Constructipay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction payment tracking application and related services (collectively, the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

Personal Information

We may collect the following personal information:

Name and contact information (email address, phone number)
Company name and business details
User account credentials
Contract and payment information
Financial information related to construction contracts
Communication preferences

Usage Information

We automatically collect certain information when you use our Service:

IP address and device information
Browser type and operating system
Pages viewed and features used
Date and time of visits
Referring website addresses

3. How We Use Your Information

We use the collected information for:

Providing and maintaining our Service
Managing your account and user authentication
Processing and tracking construction payment cycles
Sending payment notifications and deadline reminders
Improving our Service and developing new features
Communicating with you about updates and support
Complying with legal obligations
Protecting against fraudulent or illegal activity
Generating anonymised and aggregated insights for benchmarking, analytics, and commercial reporting (see section 15)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

With your consent: When you explicitly agree to share information
Service providers: With trusted third-party vendors who assist in operating our Service
Legal requirements: When required by law or to respond to legal process
Protection of rights: To protect our rights, privacy, safety, or property
Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Employee training on data protection
Secure data center facilities

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer required, we will securely delete or anonymize it.

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request your data in a portable format
Objection: Object to certain processing of your information
Withdrawal of consent: Withdraw previously given consent

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Service. Cookies are small data files stored on your device. You can control cookie preferences through your browser settings, but disabling cookies may limit certain features of our Service.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Your continued use of our Service after such modifications constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Constructipay

Email: contact@constructipay.com

Data Protection Contact: contact@constructipay.com

13. UK GDPR

Constructipay is established in the United Kingdom and our processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR), as retained in UK law following the United Kingdom's departure from the European Union, together with the Data Protection Act 2018. The UK GDPR applies independently of, and is separate from, the EU GDPR (which is addressed in the section below).

Lawful Basis for Processing

We rely on the following lawful bases under Article 6 of the UK GDPR for each category of personal data we process:

Account and contact information (name, email, phone, company details, credentials): processed on the basis of performance of a contract (Article 6(1)(b)) so that we can provide the Service to you.
Contract and payment information (construction contracts, payment cycles, financial data): processed on the basis of performance of a contract (Article 6(1)(b)).
Usage and technical data (IP address, device, browser, pages viewed): processed on the basis of our legitimate interests (Article 6(1)(f)) in operating, securing, and improving the Service.
Records retained for tax, accounting, anti-fraud, or other regulatory purposes: processed to comply with a legal obligation (Article 6(1)(c)).
Marketing communications: processed on the basis of your consent (Article 6(1)(a)) or our legitimate interests in promoting the Service to existing customers, with the right to withdraw consent or object at any time.

Your Rights under the UK GDPR

You have the right to access, rectify, erase, restrict processing of, and object to the processing of your personal data, as well as the right to data portability. To exercise these rights, please contact us using the details in section 12.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

14. EU GDPR (EEA Residents)

Constructipay's primary operating jurisdiction is the United Kingdom. If you are located in the European Economic Area (EEA), your personal data is transferred to and processed in the UK on the basis of the European Commission's adequacy decision in respect of the United Kingdom, which recognises that the UK provides an essentially equivalent level of data protection to that of the EU GDPR.

Where the EU GDPR applies to our processing of your personal data, you have the rights set out in Articles 15 to 22 of the EU GDPR, including the rights of access, rectification, erasure, restriction of processing, objection, and data portability, as well as the right not to be subject to a decision based solely on automated processing.

You have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

15. Anonymised and Aggregated Data

This Privacy Policy distinguishes between personal data — information that identifies you or could reasonably be used to identify you — and anonymised or aggregated data, which is information from which all direct and indirect personal identifiers have been permanently removed and from which you cannot reasonably be re-identified, whether alone or in combination with other information.

Where your personal data is no longer required for the purposes for which it was collected, we may, instead of deleting it, irreversibly anonymise it so that it can no longer be associated with you.

Constructipay may use, retain, combine, share, and commercially exploit anonymised and aggregated data derived from use of the Service for any lawful business purpose, including but not limited to:

Internal analytics, research, and product development
Generating industry benchmarks and payment-behaviour reports
Publishing market insights and trend data
Licensing aggregated datasets or insights to third parties, including via APIs

Because anonymised and aggregated data is not personal data under the UK GDPR or EU GDPR, the rights of access, rectification, erasure, restriction, objection, and portability described above do not apply to it.