Privacy Policy

    Last updated: 6 July 2026

    ProPlot ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    1. Data Controller

    ProPlot is the data controller for personal data processed through this application. For enquiries, contact us at admin@proplot.co.uk.

    2. What Data We Collect

    We collect the following categories of personal data:

    • Account Data: Email address, name (provided during registration)
    • Subscription Data: Payment information processed securely by Stripe — we do not store card details
    • Project Data: Site names, addresses, postcodes, plot information, build stage data, and programme schedules
    • Contractor Data: Names, email addresses, phone numbers, and company names of contractors you add to your projects
    • Audit Data: Photos, GPS coordinates, location descriptions, notes, and timestamps captured during site audits
    • Communication Data: Messages exchanged between site managers and contractors via the platform
    • Device Data: Browser type, device information, and approximate location (when GPS features are used with your consent)

    3. How We Use Your Data

    We process your personal data for the following purposes:

    • Service delivery: To provide and maintain your ProPlot account and features (legal basis: contract performance)
    • Payment processing: To manage subscriptions via Stripe (legal basis: contract performance)
    • Contractor coordination: To share relevant project information with contractors you invite (legal basis: legitimate interest)
    • Site documentation: To store audit records, photos, and GPS data for your construction sites (legal basis: contract performance)
    • Communication: To send service-related emails such as account verification (legal basis: contract performance)

    4. Data Sharing

    We share personal data only in the following circumstances:

    • Contractors: When you explicitly share project information or audit entries with contractors via share links
    • Payment processor: Stripe processes your payment information under their own privacy policy
    • Infrastructure providers: Our hosting and database services are provided by secure cloud infrastructure (servers located in the EU/UK region)
    • We do not sell your data to third parties

    5. Data Retention

    • Account data: Retained while your account is active, deleted upon account deletion
    • Project data: Retained while your account is active; deleted when you delete your account or individual projects
    • Contractor share links: Automatically expire after 30 days
    • Audit photos: Retained while associated project exists

    6. Your Rights Under UK GDPR

    You have the right to:

    • Access your personal data — contact us for a data export
    • Rectification — update your data through the app or contact us
    • Erasure — delete your account and all associated data via account settings
    • Data portability — request your data in a machine-readable format
    • Object to processing based on legitimate interests
    • Withdraw consent for GPS/location features at any time via your device settings

    To exercise any of these rights, email admin@proplot.co.uk. We will respond within 30 days.

    7. Cookies & Local Storage

    We use essential cookies and local storage for:

    • Authentication: To keep you logged in securely
    • Preferences: To remember your theme and display settings

    We do not use third-party tracking or advertising cookies.

    8. Security

    We protect your data using:

    • Encrypted connections (HTTPS/TLS) for all data in transit
    • Row-level security policies ensuring users only access their own data
    • Secure token-based authentication
    • Time-limited share links for contractor access

    9. International Transfers

    Your data is stored on servers within the EU/UK region. If data is transferred outside this area, appropriate safeguards (such as Standard Contractual Clauses) are in place.

    10. Children's Data

    ProPlot is not intended for use by individuals under 18 years of age. We do not knowingly collect data from children.

    11. Changes to This Policy

    We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.

    12. Complaints

    If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

    We use cookies to keep you logged in and improve ProPlot. Privacy Policy