Privacy Policy

1. Introduction

Threadsovereign Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our building safety compliance platform.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email, company details)
• Project and building safety documentation
• Communication records through our platform
• Usage data and analytics

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, to communicate with you, and to comply with legal obligations including those under the Building Safety Act 2022.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of our services
• Legitimate interests: Improving our services, security, and fraud prevention
• Legal obligation: Compliance with BSA 2022 and other regulatory requirements
• Consent: Marketing communications (where applicable)

5. Data Retention

We retain your data for the following periods:

• Account data: Duration of your subscription plus 2 years
• Building safety records: As required by BSA 2022 (typically building lifetime)
• Marketing data: Until you withdraw consent
• Analytics data: 26 months

6. Cookies

We use essential cookies to operate our platform and analytics cookies to improve our services. You can manage your cookie preferences through your browser settings. For more information, see our Cookie Policy.

7. Data Storage and Security

All data is stored on servers located within the United Kingdom. We implement industry-standard security measures including AES-256 encryption at rest and TLS 1.3 for data in transit.

8. Your Rights Under GDPR

As a UK/EU data subject, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

9. Data Controller

The data controller responsible for your personal data is:

10. Contact Us

For any privacy-related questions or to exercise your rights, please contact our Data Protection Officer at privacy@threadsovereign.co.uk or write to us at Threadsovereign Ltd, 1 St. Peters Mews, Poole, England, BH14 0DN.