Directory Privacy Notice — Construct365

Where the information in the Construct365 company directory comes from, and what it means for you. This notice supplements our main Privacy Policy.

Who we are

Construct365 Limited operates construct365.com, a directory of UK construction companies together with related tools, guides and marketplace listings. This notice explains how we handle personal data in the company directory. It sits alongside our main privacy policy, which covers accounts, enquiries, marketing and the rest of the site. Company: Construct365 Limited, registered in England and Wales, company number 09805408, incorporated 2 October 2015 Registered office: 3 Brentwater Terrace, Westminster Road, London W7 3FH ICO registration: ZA801325 Data protection contact: privacy@construct365.com We are the controller for the directory data described below. We have not appointed a data protection officer, as we are not required to.

What data we hold

Most of the directory is information about companies rather than people. Company names, registration numbers, registered addresses, company status, incorporation dates, SIC codes and filed financial figures are corporate records, not personal data. Some of what we hold does relate to identifiable individuals: Contact details published by a business. A telephone number or email address associated with a company record. Where a business is a sole trader or a small partnership, these can identify a person directly. We classify both as personal data. Company officer records. Names, roles, appointment dates and resignation dates of directors and other officers, as recorded at Companies House. We hold these to match records accurately between sources and to detect when a company's register entry changes. For each company, we show the current officers recorded at Companies House: their name, role and the date they were appointed. We do not show officers' addresses or dates of birth, and an officer who resigns is removed when the company's record is next refreshed. Free-text fields that may incidentally name someone. Company descriptions, service descriptions and filing descriptions occasionally include a person's name. We do not collect these fields in order to obtain personal data. Information a business gives us directly. Where someone claims and manages a company listing, the details they supply and the fact of the claim. We do not hold special category data - nothing about health, beliefs, ethnicity, politics or similar - and we do not seek it.

Where we got it

We did not collect this information from you directly. Under Article 14 of the UK GDPR we have to tell you where it came from. We maintain a register of our sources, and the public version of that register is available on this page. Companies House. The public register of UK companies, including company records, officer appointments and filing history. This is public data made available under the Open Government Licence v3.0. Endole. A licensed data export derived from public register information, used for company websites and selected financial figures. Publicly available business websites. Where a company publishes its own website address, social media profiles or brand logo, we may record those. We extract only a defined list of business fields, we respect robots.txt directives, and we do not retain page content. Business contact details published online. Where a business publishes a general contact email or telephone number, we may record it. This collection is currently switched off. The businesses themselves. Information supplied by an owner or authorised representative when they claim or update a listing. Each source on our public register carries its licence basis. Where we hold no recorded terms for a source, the register says so rather than leaving it blank.

The sources we currently draw directory information from:

Companies House API — developer.company-information.service.gov.uk (Open Government Licence v3.0 (public register data))
Terms: https://developer.company-information.service.gov.uk/terms-of-service
Company website & social enrichment crawl (Reuse permission unverified: public identity facts and robots.txt compliance are not a licence; website and discovery-provider terms require review)
Terms: No terms URL is recorded for this source.
Company website contact-email scrape (Reuse permission unverified: a publicly displayed business mailbox is not consent or a licence)
Terms: No terms URL is recorded for this source.
Company website logo fetch (Reuse permission unknown: publishing a logo does not grant permission to copy, host or display it)
Terms: No terms URL is recorded for this source.
Endole company export seeds — www.endole.co.uk (Export redistribution permission unknown: no applicable Endole agreement or accepted terms version has been evidenced)
Terms: https://www.endole.co.uk/terms
Owner / user submissions (Provided directly by the listing owner or claimant)
Terms: No terms URL is recorded for this source.
Unattributed legacy contact
Terms: No terms URL is recorded for this source.

Why we hold it

We run a directory so people looking for construction firms can find them, compare them and check basic facts about them, and so construction businesses are visible to potential customers. Specifically: • to publish a searchable directory of UK construction companies • to keep listings accurate against the public register, and detect when a company's status changes • to match records from different sources to the right company - which is what officer information is mainly for • to rank and compare companies using filed financial figures • to let a business claim its listing and correct what we show • to respond to correction, objection and removal requests • to invite businesses to claim or manage their listings • to match requests for quotations with relevant businesses and pass on enquiries through our RFQ service We show current officers so that businesses can check who runs a firm before they work with it — the same purpose for which Companies House makes the register public. Our lawful basis is legitimate interests. Directory data is not used for other outbound marketing or lead-generation purposes. We do not use directory information to make automated decisions that produce legal effects or similarly significant effects about anyone.

Our lawful basis

Our lawful basis for showing company information and current officers is legitimate interests: helping businesses check who they are dealing with before they work with them. Officers can object at any time using "Correct or remove".

How long we keep it

We keep company records while the company remains on the public register and is relevant to the construction sector. When a company is dissolved, liquidated, closed or removed from the register, we delete the officer records we hold for it. This runs automatically and the result is recorded. When information disappears from the public register, we clear the personal fields associated with it. Corporate details, including location, are retained and marked with the date they were last confirmed. When someone asks us to remove information, we apply a suppression that survives re-import, so the information does not reappear the next time we refresh from source. We review the directory against Companies House continuously, and a record that ceases to be relevant to the construction sector is removed at that review.

Who we share it with

We do not sell directory information, and we do not share it with third parties for their own marketing. We use Replit for hosting and infrastructure, Neon for database services, and Amazon Web Services (Amazon SES) for email delivery. These providers process directory data to provide those services for us. Directory data is processed in the United Kingdom or the European Union. Where directory data is transferred from the UK to the EU, the transfer is covered by the UK's adequacy arrangements for the European Economic Area. We do not transfer directory data outside the UK or EU. Website analytics, advertising cookies and related visitor-data processing are explained in our main Privacy Policy and cookie controls. Publicly displayed directory listings are, by their nature, visible to anyone visiting the site and to search engines that index it.

Your rights

If we hold personal data about you, you have the right to: • be told what we hold and ask for a copy of it • have it corrected if it is wrong or incomplete • have it erased in certain circumstances • restrict how we use it while a concern is being looked into • object to our using it, because we rely on legitimate interests - see the next section • complain to the Information Commissioner's Office Because we rely on legitimate interests rather than consent, there is no consent for you to withdraw for the directory. Where you have separately consented to something - marketing email, for instance - you can withdraw that at any time, and it will not affect anything we did beforehand. There is no charge for making a request. We respond within one calendar month. If a request is particularly complex we may extend that, and we will tell you if we do and why. We may need to confirm your identity or your connection to the company before acting, particularly for a removal request.

How to object

You can object to our holding or publishing information about you, and you can ask us to correct or remove it. Use the request form at /privacy/request. It handles corrections, objections and removal requests, and records your request with a response deadline of one calendar month. You can also use the "Correct or remove this listing" control on any company page, or write to us at the data protection address in section 1. An officer can ask us to stop showing their name using "Correct or remove" on the company page, and we will remove it. Tell us which company or listing you mean and what you would like changed. If you are asking for removal, it helps to say why, though you do not have to give a reason to object. If we agree to remove or suppress information, we record that in a way that prevents it reappearing when we next refresh from our sources. If we disagree, we will explain why, and you can complain to the ICO.

How to complain to the ICO

If you are unhappy with how we have handled your information, please tell us first so we have a chance to put it right, using the data protection address in section 1. You can also complain to the Information Commissioner's Office, the UK's independent supervisory authority for data protection. Complaining to us first is not a precondition. Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 ico.org.uk/make-a-complaint