Privacy Policy

Build Prep Limited | Last Updated: 20 August 2026

Build Prep Limited (“we,” “us,” or “our”) operates the Build Prep website and mobile application (collectively, the

“Service”). This Privacy Policy explains how we hold, use, disclose, and safeguard your information when you use

our Service.

By accessing or using Build Prep, you agree to this Privacy Policy. If you do not agree, please do not use the

Service.

Our Philosophy on Your Data

We are highly against collecting or storing any user or client data beyond what is strictly necessary and under the

user’s direct control.

You retain ownership and control of your data at all times. Build Prep is designed so that project information stays

under your direction. We do not keep data longer than required to deliver the Service to you, or as you specifically

instruct us.

We will never sell your data under any circumstances.

1. Roles – Controller and Processor

• When you create an account or interact with us as an individual, we act as the data controller of your account

and contact information.

• When you (or your organisation) upload or create project and client data (files, images, notes, business

information, etc.), you are the data controller of that information. We act solely as a data processor and

process it only on your documented instructions and solely to provide the Service to you.

Business customers may request a Data Processing Addendum (DPA) that formalises these roles and our

processing obligations.

2. Information We Hold

We may hold the following types of information that you provide or that is generated through your use of the

Service under your control:

Account & contact information

• Name, email address, and account credentials (if you create an account)

• Profile or company details you choose to add

Project & client data (treated as highly sensitive)

All client data, files, images, notes, documents, and business information acquired or uploaded through Build Prep

are treated as highly sensitive and confidential.

This includes (but is not limited to):

• Project files and documents

• Images and photos

• Notes and internal comments

• Business information, pricing, drawings, specifications, and any materials related to opportunities or bids

Construction is a highly competitive industry. Information shared during opportunity and bidding stages is

especially confidential. We handle all such data with elevated care and never use it for any purpose other than

providing the Service to you.

Technical & usage information

• Device type, operating system, and basic device identifiers

• Usage data necessary to operate and improve the Service (e.g. crash logs, performance metrics)

• IP address (used only for security and basic service functionality)

We do not intentionally seek or hold sensitive personal data (health, precise real-time location, biometrics, etc.)

beyond what you deliberately provide for a project.

3. How We Use the Information We Hold

We use the information solely to:

• Provide, maintain, and improve the Service for you

• Create and manage your account (if applicable)

• Respond to support requests

• Ensure security and prevent abuse

• Comply with legal obligations

We never use project or client data for marketing, secondary analysis, or any purpose unrelated to delivering the

Service to you.

4. How We Share Information

We will never sell your data under any circumstances.

We may share information only in these limited cases:

• With carefully selected service providers (sub-processors) who help us operate the Service. These providers

are bound by strict confidentiality and data-processing agreements and may only process data on our

instructions.

• When required by law or to protect rights, safety, or property

• In the event of a legitimate business transfer, with appropriate notice

Project files, images, notes, and business information are never shared with third parties for their own purposes.

5. Data Security

Because construction project data is highly sensitive — especially during competitive opportunity and bidding

stages — we apply elevated technical and organisational security measures, including:

• Encryption of data in transit (TLS) and at rest where appropriate

• Strict access controls limited to personnel who need access to perform their duties

• Regular review of access rights and security practices

• Organisational measures designed to prevent unauthorised access, use, modification, or disclosure

No system is 100% secure, but we take strong practical steps to protect the confidentiality of your project data.

6. Data Retention and Deletion

We retain information only for as long as needed to provide the Service or as required by law.

You remain in control. You may request deletion of your account and associated data at any time by contacting us.

Any request to remove or delete your data will be actioned promptly and is final. Once processed, the data is

permanently removed from our active systems. Residual copies may remain in encrypted backups for a limited

period solely for disaster-recovery and legal compliance purposes; these are not accessible for normal use and are

overwritten according to our backup retention schedule.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to know / access – request details of the personal information we hold about you

• Right to correct – request correction of inaccurate information

• Right to delete – request deletion of your personal information (subject to legal exceptions)

• Right to data portability – request a copy of your data in a portable format

• Right to opt out of sale or sharing – we do not sell your data; you may still submit an opt-out request

• Right to limit use of sensitive personal information (where applicable)

• Right to non-discrimination for exercising your privacy rights

How to exercise your rights

law (normally 30–45 days). California residents and residents of other U.S. states with comprehensive privacy laws, as well as individuals in the EEA, UK and Switzerland, may have additional rights under CCPA/CPRA, GDPR

or equivalent legislation.

8. Children’s Privacy

Build Prep is not directed at children under 13 (or the applicable minimum age in your jurisdiction) nor intended for use by children.

We do not knowingly hold personal information from children.

9. International Transfers

If information is transferred outside your country, we take steps to ensure appropriate safeguards are in place

(including standard contractual clauses where required).

10. Changes to This Privacy Policy

We may update this policy from time to time. The revised version will be posted on this page with an updated “Last

Updated” date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need a Data Processing

Addendum, please contact us:

Build Prep Limited

Email: privacy@buildprep.co.nz

Report abuse