How Strukta handles your data.

Strukta provides UK construction opportunity intelligence from public planning and tender sources. This notice tells you what personal data we use, why, and what rights you have.

We are the data controller for personal data in your Strukta account and for the platform's analytical data. For any privacy question, email privacy@strukta.io.

We collect:

• Account details: name, work email, password hash, role.
• Company details: business name, sector, trades, regions.
• Subscription details: plan, billing status, invoices, and (via Stripe) the last four digits of your card.
• Workspace content: saved searches, saved records, notes, profile settings.
• Public planning and tender records ingested from UK public sources.
• Professional contact information: name, role, company, work email, work phone, and work LinkedIn, sourced from public records and published company information.
• Service logs: IP address, browser, device, timestamps, cookie identifiers.

Data comes from:

• You.
• Your employer or teammates.
• Public planning portals across UK councils.
• National tender feeds: Contracts Finder and Find a Tender.
• Public Companies House records.
• Public professional websites and published company directories.

• To provide the app.
• To show construction opportunities relevant to your business.
• To link projects, tenders, companies, and contacts.
• To keep records fresh and accurate.
• To send account, alert, and service emails.
• To improve security and product performance.
• To bill subscriptions and meet legal obligations.

We rely on the following lawful bases under UK GDPR:

• Contract: your account, subscription, saved searches, and alerts.
• Legitimate interests: operating public opportunity intelligence, linking projects, companies and contacts, keeping data accurate, securing the service, and sending service emails. We balance this against the rights of individuals named in public records, who are generally senior professionals acting in a published business capacity.
• Legal obligation: tax records, accounting, and lawful requests from authorities.
• Consent: non-essential cookies, and marketing emails to people who are not already Strukta customers.

We do not use Strukta data to make legal, employment, credit, housing, or similarly significant decisions about individuals.

We do not intentionally collect special category data (such as health, racial, religious, or trade-union information). If public documents contain unnecessary personal or sensitive details, we aim to minimise, suppress, or remove that information where appropriate.

Strukta may use automated matching to rank opportunities against a customer's business profile. This is used to prioritise business records. It is not used to make legal, employment, credit, housing, or similarly significant decisions about individuals.

We share data with carefully chosen providers and parties only as needed to run the service:

• Hosting and database providers (for example, Vercel and Supabase).
• Payment provider (Stripe) for billing.
• Email provider for transactional, alert, and (where you consented) marketing email.
• Analytics, logging, and error-monitoring tools.
• Professional advisers, including accountants and lawyers, when required.
• Other Strukta users from your own organisation, within your shared workspace.

We do not sell personal data.

Some providers are based outside the UK, including in the US and the EU. International transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, the UK International Data Transfer Agreement, or the UK-US Data Bridge / EU-US Data Privacy Framework where applicable. To request our current subprocessor list, email privacy@strukta.io.

We use a small number of cookies and similar tools. Strictly necessary cookies keep you logged in and the site secure. Optional analytics cookies help us understand how the site is used. We ask for your consent before non-essential cookies load.

You can change your choices any time at /cookies.

• Account data: while your account is active, plus six months.
• Billing records: seven years (UK tax and accounting requirements).
• Public opportunity records: while commercially relevant; superseded records may be archived.
• Suppression and objection requests: kept indefinitely so we can keep honouring the request.
• Service logs: typically 90 days.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Ask for erasure.
• Restrict processing.
• Object to processing, including direct marketing, which is an absolute right.
• Portability where it applies.
• Withdraw consent where consent was the basis.
• Complain to the Information Commissioner's Office at ico.org.uk.

We respond to requests within one month. If a request is complex, we may extend by two further months and will tell you why. Email privacy@strukta.io.

If your professional details appear in Strukta and you want them corrected, suppressed, or removed, email privacy@strukta.io. We will respond within 30 days. If you object to processing based on legitimate interests we will stop, unless we can show overriding lawful grounds; if you object to direct marketing, we will stop.

Strukta is a business-to-business tool. It is not intended for anyone under 18. We do not knowingly collect personal data from children.

We use industry-standard security, including encryption in transit, hashed passwords, scoped access, and audit logs. If a personal data breach occurs that is likely to risk your rights, we will notify affected users and, where required, the ICO within 72 hours of becoming aware.

We may update this notice. The "Last updated" date at the top shows the most recent change. We will tell you about material changes by email or in the app.

Email privacy@strukta.io.

If you need a postal address for a formal request, ask by email and we will provide it.