Privacy Policy

1. Introduction

StoreySafe ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our building safety management platform.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email, phone number)
• Organization name and role
• Account credentials
• Payment information (processed by our payment provider)
• Communications you send to us

Building Information

When you use our platform, you may upload building-related data including:

• Building addresses and details
• Safety case information and risk assessments
• Building Information Models (BIM/IFC files)
• Documents and images
• Audit records and compliance data

Automatically Collected Information

We automatically collect certain information when you use our platform, including device information, IP addresses, browser type, and usage data. This helps us improve our services and ensure security.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: Processing necessary to perform our contract with you
• Legitimate interests: Processing necessary for our legitimate business interests
• Legal obligation: Processing necessary to comply with legal requirements
• Consent: Where you have given consent for specific processing

5. Data Sharing and Disclosure

We may share your information with:

• Service providers: Third parties who provide services on our behalf (hosting, analytics, payment processing)
• Legal requirements: When required by law or to respond to legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you have given us permission to share

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, regular security assessments, and secure data centers located in the United Kingdom.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes. Building safety data may be retained for the lifetime of the building plus additional periods as required by the Building Safety Act 2022.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (where applicable)
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Object: Object to certain processing
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@storeysafe.co.uk.

9. Cookies

We use cookies and similar technologies. For details, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.