Legal

Privacy Policy

We take your privacy seriously. This policy explains what data we collect, how we use it, and the rights you have over it.

Effective date: 1 August 2025Last updated: 30 July 2026

By using Tresta you agree to this Privacy Policy. If you do not agree, please do not use the platform. We may update this policy from time to time; continued use after changes constitutes acceptance of the revised policy.

1. Information We Collect

Account & Profile Data

When you register or update your profile on Tresta, we collect information such as your name, email address, job title, company name, phone number, and profile picture.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, time spent, IP address, browser type, operating system, and device identifiers.

Project & Operational Data

We collect data you submit while using the platform, such as project details, timesheets, invoices, quotations, purchase orders, and other construction management records.

Communications

If you contact our support team or send us feedback, we retain the content of those communications along with your contact details.

2. How We Use Your Information

Providing & Improving the Service

We use your data to operate, maintain, and improve the Tresta platform, including processing transactions, generating reports, and personalising your experience.

Communications

We may send you service-related emails such as account confirmations, security alerts, and important product updates. With your consent, we may also send promotional content.

Analytics & Research

Aggregated, anonymised usage data helps us understand how the platform is used so we can make better product decisions.

Legal Compliance

We may use your information to comply with applicable laws, respond to lawful requests, and protect the rights and safety of Tresta, our users, and the public.

3. Data Sharing & Disclosure

Within Your Organisation

Data you create on Tresta may be visible to other authorised members of your organisation, depending on the roles and permissions configured by your administrator.

Service Providers

We share data with trusted third-party service providers (e.g., cloud hosting, email delivery, analytics) who process it solely on our behalf and under strict confidentiality obligations.

Legal Requirements

We may disclose your information if required by law, regulation, or valid legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of any person.

Business Transfers

If Tresta is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

4. Data Security

Security Measures

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, and regular security reviews to protect your data.

Breach Notification

In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

5. Data Retention

Retention Period

We retain your personal data for as long as your account is active or as needed to provide services. After account closure, we may retain certain data for up to 7 years to comply with legal and contractual obligations.

Deletion Requests

You may request deletion of your personal data at any time by contacting us. We will action your request within 30 days, subject to any legal retention requirements.

6. Your Rights

Access & Portability

You have the right to request a copy of the personal data we hold about you in a structured, machine-readable format.

Rectification

If any of your personal data is inaccurate or incomplete, you can update it at any time through your profile settings or by contacting us.

Erasure & Restriction

You have the right to request that we erase your personal data or restrict its processing, subject to applicable law and contractual obligations.

Objection & Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Cookies & Tracking

Essential Cookies

We use strictly necessary cookies to keep you logged in and maintain your session. These cannot be disabled without affecting platform functionality.

Analytics Cookies

With your consent, we use analytics cookies to understand how the platform is used. You can manage cookie preferences through your browser settings.

8. Contact Us

Data Controller

Tresta is the data controller responsible for your personal information. If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our team.

Email

privacy@tresta.co.uk

Have a question about your data? Contact our support & privacy team →