This notice explains how Construct Software Ltd handles personal data when you visit our public websites or contact us through them. It covers https://www.constructsoftware.co.uk, our product pages, the holding pages for products in development, and the public part of our Help Centre (together, “our websites”). It applies from 26 October 2026.
If you have a Construct Software account, our Platform Privacy Notice explains how we handle personal data in our software.
1. Who we are
Construct Software Ltd is the controller for the personal data described in this notice. We are registered in England and Wales, company number [COMPANY NUMBER], with our registered office at [REGISTERED ADDRESS]. Our ICO registration number is [ICO NUMBER].
Data protection contact: compliance@constructsoftware.co.uk.
2. What we collect
When you browse our websites
- Our web servers record technical details of each request, such as your IP address, browser type, the page requested and the date and time. This happens on every website and is needed to deliver pages and keep the websites secure.
- We also count visits to understand how our websites are used, without cookies (see section 4A, “Website statistics”). We do not use advertising or tracking tools, and we do not build profiles of visitors.
When you contact us or ask for a demo
- The details you enter in the form: your name, email address, company, and depending on the form your phone number, job title, the product you are interested in, the type of account, the approximate number of sites and buildings, and your message. Fields marked as required are needed for us to respond; the others are optional.
- The date and time you sent the form.
- Any emails you send us, and our replies.
When you register interest in a product in development
- Your email address, and optionally your name, company and a message.
When you use the public Help Centre
- Only the technical details described above, and the website statistics described in section 4A. Searches you make are not stored against you; we count the words searched for, without linking them to anyone, to improve our articles.
3. How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Delivering our websites and keeping them secure, including stopping spam and automated submissions | Legitimate interests in running secure websites |
| Replying to your enquiry or demo request, and talking to you about our products where you have asked us to | Legitimate interests in responding to you; taking steps at your request before entering into a contract |
| Telling you when a product you registered interest in becomes available | Your consent, given by submitting the form, which you can withdraw at any time |
| Keeping records of our correspondence, and complying with the law | Legitimate interests; legal obligation |
We will not send you marketing you have not asked for, we do not sell personal data, and we do not make decisions about you based solely on automated processing.
4. Cookies
4.1 Our websites use only cookies that are strictly necessary for them to work, so we do not ask for consent to set them:
| Cookie | Where | Purpose | How long |
|---|---|---|---|
| sc_session, etb_session and similar <product>_session cookies | Product pages | A technical cookie that lets our web server’s security protection deliver the page and its forms. It holds no personal data. | Until you close your browser |
| cs_no_count | All our websites and apps (set only from the Website statistics page) | Remembers that you asked not to be counted in our website and usage statistics. Set only if you choose “Don’t count my visits”. It holds no personal data. | 5 years, or until you choose to be counted again or clear your cookies |
4.2 https://www.constructsoftware.co.uk itself, the holding pages and the public Help Centre set no cookies, unless you choose not to be counted in our website statistics (section 4A).
4.3 We do not use analytics or advertising cookies: our website statistics (section 4A) work without them. If we ever want to use such cookies, we will update this notice first and ask for your consent before setting them.
4.4 If you sign in to one of our apps, the cookies described in our Platform Privacy Notice are used.
4A. Website statistics
4A.1 We measure how our websites are used so that we can improve them: for example, which pages are visited, how visitors find us, whether pages load quickly and whether anything goes wrong. We do this ourselves, on our own servers. No other company receives this information, and we do not use it for advertising or to build profiles of visitors.
4A.2 For each page visited we record the page, the date and time, the website that linked to it, any campaign codes in the link, the country you are in (worked out from your IP address), and your type of browser, operating system and device. A small script on our own pages adds your screen size, how long the page was in view, how far you scrolled, how quickly it loaded and any technical error.
4A.3 We do not keep your IP address or your browser’s full details for statistics. To count how many different people visit in a day, we combine them with a random value that changes every day and is then destroyed, and keep only the result. It cannot be used to recognise you on another day, and we do not combine it with anything else to identify you.
4A.4 We do not set cookies or store anything on your device for statistics.
4A.5 The detailed records are deleted after 90 days. After that we keep only totals, such as the number of visits to each page each day, which do not identify anyone, for 25 months.
4A.6 We rely on our legitimate interests in understanding and improving our websites. You can object at any time, free of charge:
- we do not count visits from browsers that send a Global Privacy Control or Do Not Track signal;
- if you have a Construct Software account, you can switch on “Don’t count my visits” in Construct Software ID, under Preferences; and
- anyone can choose “Don’t count my visits” on our Website statistics page. We then store one small cookie, cs_no_count, on your device so that we remember your choice (see section 4).
Choosing not to be counted does not change how our websites work.
5. Who we share it with
We use these providers to run our websites. Each is bound by a written agreement, or its published terms, to protect personal data.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| 20i Ltd | Hosting our websites, and sending form submissions to our team by email | Technical request details; the contents of forms you send | United Kingdom |
| Cloudflare, Inc. (Cloudflare R2) | Storing images used in Help Centre articles, which our server fetches on your behalf | None about you: your browser does not contact Cloudflare | European Union |
We may also share personal data with our professional advisers, and with regulators, courts or law enforcement where the law requires it.
6. International transfers
Our websites are hosted in the United Kingdom. Our pages load their fonts, icons and scripts from our own servers, so your browser does not connect to any other provider’s network to display them. Where we transfer personal data outside the UK ourselves, we rely on appropriate safeguards under UK data protection law, such as UK adequacy regulations or the UK International Data Transfer Agreement.
7. How long we keep it
- Enquiries, demo requests and our correspondence: up to 24 months after our last contact with you, unless you become a customer, in which case our Platform Privacy Notice applies.
- Interest registrations: until we have told you the product is available, or for up to 24 months, whichever is sooner, or until you ask us to remove you.
- Technical request records: for up to 12 weeks, unless needed to investigate a security incident.
- Website statistics: detailed records for 90 days, then totals that do not identify anyone for 25 months (section 4A).
- Backups: emails and other data we delete remain in our hosting provider’s backups for a limited period, normally no more than 30 days, and are then permanently removed. Our hosting provider keeps its backups on separate, isolated backup systems certified to ISO 27001 (information security) and ISO 22301 (business continuity), with an independent SOC 2 Type 2 report.
8. How we protect it
All our websites use encrypted connections (HTTPS). Forms are protected against automated submissions, form contents are sent to our team by encrypted email connections, and access to our mailboxes and servers is restricted to the people who need it.
9. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data;
- object to processing based on our legitimate interests; and
- withdraw consent, where we rely on it.
To use these rights, email compliance@constructsoftware.co.uk. We will respond within one month, and there is normally no fee.
10. Complaints
If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.
11. Changes to this notice
We may update this notice. The current version, with the date it took effect, is always available on this page, and earlier versions remain available.