Legal
Privacy Policy
We take your privacy seriously. This policy explains what data we collect, how we use it, and the rights you have over it.
By using Tresta you agree to this Privacy Policy. If you do not agree, please do not use the platform. We may update this policy from time to time; continued use after changes constitutes acceptance of the revised policy.
1. Information We Collect
Account & Profile Data
When you register or update your profile on Tresta, we collect information such as your name, email address, job title, company name, phone number, and profile picture.
Usage Data
We automatically collect information about how you interact with our platform, including pages visited, features used, time spent, IP address, browser type, operating system, and device identifiers.
Project & Operational Data
We collect data you submit while using the platform, such as project details, timesheets, invoices, quotations, purchase orders, and other construction management records.
Communications
If you contact our support team or send us feedback, we retain the content of those communications along with your contact details.
2. How We Use Your Information
Providing & Improving the Service
We use your data to operate, maintain, and improve the Tresta platform, including processing transactions, generating reports, and personalising your experience.
Communications
We may send you service-related emails such as account confirmations, security alerts, and important product updates. With your consent, we may also send promotional content.
Analytics & Research
Aggregated, anonymised usage data helps us understand how the platform is used so we can make better product decisions.
Legal Compliance
We may use your information to comply with applicable laws, respond to lawful requests, and protect the rights and safety of Tresta, our users, and the public.
3. Data Sharing & Disclosure
Within Your Organisation
Data you create on Tresta may be visible to other authorised members of your organisation, depending on the roles and permissions configured by your administrator.
Service Providers
We share data with trusted third-party service providers (e.g., cloud hosting, email delivery, analytics) who process it solely on our behalf and under strict confidentiality obligations.
Legal Requirements
We may disclose your information if required by law, regulation, or valid legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of any person.
Business Transfers
If Tresta is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
4. Data Security
Security Measures
We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, and regular security reviews to protect your data.
Breach Notification
In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.
5. Data Retention
Retention Period
We retain your personal data for as long as your account is active or as needed to provide services. After account closure, we may retain certain data for up to 7 years to comply with legal and contractual obligations.
Deletion Requests
You may request deletion of your personal data at any time by contacting us. We will action your request within 30 days, subject to any legal retention requirements.
6. Your Rights
Access & Portability
You have the right to request a copy of the personal data we hold about you in a structured, machine-readable format.
Rectification
If any of your personal data is inaccurate or incomplete, you can update it at any time through your profile settings or by contacting us.
Erasure & Restriction
You have the right to request that we erase your personal data or restrict its processing, subject to applicable law and contractual obligations.
Objection & Withdrawal of Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
8. Contact Us
Data Controller
Tresta is the data controller responsible for your personal information. If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our team.
privacy@tresta.co.uk
Have a question about your data? Contact our support & privacy team →