Privacy policy

At BCR Comply Limited ("BCR Comply", "we", "our" or "us"), we are committed to protecting your privacy and handling personal information responsibly.

We understand that when you use our services, contact us or visit our website, you trust us with your information. We take that responsibility seriously.

This Privacy Policy explains:

• what personal information we collect;
• why we collect it;
• how we use it;
• who we share it with;
• how we protect it;
• your rights under the General Data Protection Regulation (GDPR).

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and if the changes are material we will notify you more directly. We encourage you to review this policy whenever you use our site or services.

We have written this policy in plain English because we believe privacy information should be easy to understand.

BCR Comply Limited provides cloud-based software designed to help organisations manage construction, retrofit, renewable energy, solar installation and other field-based projects.

Our services include:

• web-based dashboards;
• mobile applications;
• project management tools;
• compliance management;
• forms;
• inspections;
• surveys;
• contractor management;
• document management;
• reporting;
• messaging.

For the purposes described within this Privacy Policy, BCR Comply Limited is the Data Controller of the personal information described in this document.

Where our customers use our platform to store information about homeowners, contractors, employees or other individuals, those customers will generally act as the Data Controller, while BCR Comply acts as a Data Processor on their behalf. Those processing activities are governed separately by our Data Processing Agreement.

If you have any questions about this Privacy Policy or how we process personal information, please contact us.

BCR Comply Limited

Email: privacy@bcrcomply.com

Website: www.bcrcomply.com

Postal Address: Holborn St., Sligo, Ireland, F91 YP8A

Everything we do is guided by a number of simple principles.

We only collect information we genuinely need.

We avoid collecting unnecessary personal information.

We explain why we collect it.

Whenever reasonably possible, we explain why information is being requested.

We protect your information.

We use appropriate technical and organisational measures designed to safeguard personal information.

We do not sell personal information.

We do not sell customer or user personal information to advertisers or data brokers.

We respect your rights.

We aim to make it easy for individuals to exercise their rights under applicable data protection legislation.

This Privacy Policy applies to personal information collected by BCR Comply when:

• you visit our website;
• you request a demonstration;
• you contact us;
• you create an account;
• your organisation purchases a subscription;
• you use our Dashboard;
• you use our Mobile Application;
• you contact Support;
• you attend one of our events;
• you subscribe to updates;
• you interact with us on social media;
• you communicate with us by email or telephone.

This Privacy Policy does not replace any privacy information supplied by your employer or organisation.

The information we collect depends upon how you interact with BCR Comply.

Examples include:

Identity Information

• name;
• job title;
• employer;
• organisation;
• username.

Contact Information

• email address;
• telephone number;
• business address.

Account Information

• username;
• password (stored securely using appropriate encryption techniques);
• login history;
• account preferences.

Technical Information

When you use our website or software we may automatically collect technical information such as:

• browser type;
• operating system;
• device type;
• IP address;
• application version;
• pages visited;
• session information;
• diagnostic information.

This information helps us maintain the reliability and security of our services.

Billing Information

Where applicable we may collect:

• billing contact details;
• company information;
• VAT information;
• subscription history;
• payment references.

We do not store complete payment card details where payments are processed by third-party payment providers.

Support Information

When you contact Support we may collect:

• support requests;
• screenshots;
• emails;
• diagnostic information;
• attachments;
• communication history.

This helps us investigate and resolve issues.

Marketing Information

If you choose to receive marketing communications we may record:

• communication preferences;
• event registrations;
• newsletter subscriptions.

You may unsubscribe at any time.

In some situations we may receive personal information from:

• your employer;
• your organisation;
• authorised administrators;
• integration partners;
• payment providers;
• authentication providers.

We only use this information where there is a lawful basis for doing so.

We use personal information for purposes including:

• providing our services;
• creating user accounts;
• authenticating users;
• customer support;
• managing subscriptions;
• invoicing;
• improving our software;
• monitoring security;
• preventing fraud;
• complying with legal obligations;
• responding to enquiries.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

Under the GDPR we rely on one or more lawful bases for processing personal information.

These include:

Contract

Where processing is necessary to provide our services or fulfil our contractual obligations.

Examples include:

• creating accounts;
• providing subscriptions;
• customer support.

Legitimate Interests

Where processing is necessary for our legitimate business interests provided those interests do not override your rights.

Examples include:

• improving our software;
• preventing fraud;
• network security;
• monitoring performance;
• responding to customer enquiries.

Legal Obligation

Where we are required to process information to comply with applicable law.

Examples include:

• tax legislation;
• accounting requirements;
• court orders.

Consent

Where we rely upon consent, you may withdraw that consent at any time.

Examples may include:

• marketing emails;
• optional cookies.

Our website and online services may use cookies and similar technologies to improve your experience, maintain security and help us understand how our services are used.

Cookies are small text files stored on your device by your web browser.

Some cookies are essential for the operation of our website and services, while others help us improve performance and understand how visitors use our website.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage your cookie preferences through your browser settings or through our cookie management tools where available.

Further information is available in our Cookie Policy.

To help us improve our website and services, we may use website analytics tools that provide information such as:

• pages visited;
• time spent on pages;
• browser type;
• operating system;
• approximate geographical location;
• referral sources;
• device type.

This information helps us understand how visitors use our website and identify opportunities to improve the user experience.

Where practical, we seek to minimise the amount of personal information collected through analytics services.

When you use the BCR Comply Dashboard or Mobile Application, certain information is generated automatically to enable the Service to operate securely and reliably.

This may include:

• login activity;
• authentication events;
• account changes;
• project access;
• uploaded files;
• synchronisation activity;
• software version information;
• error reports;
• diagnostic information.

This information assists us in maintaining the security, reliability and performance of the Service.

The BCR Comply Mobile Application may request access to certain features of your mobile device where required to provide functionality.

Depending upon the features you use, this may include access to:

• the device camera;
• photographs;
• file storage;
• notifications;
• location services.

Access to these features is requested only where reasonably necessary for the operation of the application.

You may choose to deny certain permissions, although doing so may prevent some functionality from operating correctly.

Where enabled by your organisation, the Mobile Application may use your device camera to allow you to capture photographs relating to projects, surveys, inspections or compliance activities.

Photographs captured through the application become part of your organisation's project records.

BCR Comply does not use these photographs for advertising or marketing purposes.

Some features of the Mobile Application may use location information where enabled by your organisation.

Examples may include:

• recording the location at which compliance photographs were taken;
• verifying attendance at project locations;
• supporting project management workflows.

Where location services are used, they are intended solely to support the legitimate business activities of the Customer using the Service.

Where enabled, the Mobile Application may send notifications relating to:

• messages;
• project updates;
• appointments;
• assigned work;
• reminders;
• other operational events.

Users can normally manage notification preferences through the application or their device settings.

The Service allows authorised users to upload information including:

• documents;
• forms;
• photographs;
• notes;
• reports;
• compliance records;
• survey information.

In most cases this information is uploaded on behalf of the Customer organisation.

BCR Comply processes this information as a Data Processor acting on the Customer's instructions.

We retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected, to comply with legal obligations or to protect our legitimate business interests.

Examples include:

Customer Accounts

Retained while the account remains active and for a reasonable period afterwards where necessary to administer the account.

Billing Information

Retained for the period required by applicable accounting and taxation legislation.

Support Records

Retained for as long as reasonably necessary to assist with ongoing support, improve our services and meet legal obligations.

Marketing and opting out

We may email you information about our products or services that you request or that we believe may interest you. You can opt out at any time by clicking the unsubscribe link in any marketing email or by emailing us at info@bcrcomply.com.

Website Analytics

Retained in accordance with the settings of the analytics services used.

Customer Project Data

Where BCR Comply processes Customer Data on behalf of its customers, retention is governed primarily by the Customer's instructions and our contractual commitments.

As described in our Terms & Conditions, BCR Comply is committed to providing Customers with continued read-only access to Customer Data for a period of up to seven (7) years following the end of a subscription, subject to applicable law.

Protecting personal information is fundamental to the operation of BCR Comply.

We maintain technical and organisational measures designed to reduce the risk of:

• unauthorised access;
• accidental loss;
• unlawful disclosure;
• alteration;
• destruction.

Security measures may include:

• encryption of data during transmission;
• encryption of stored data where appropriate;
• secure authentication;
• role-based permissions;
• monitoring;
• backups;
• access controls;
• software updates;
• security testing.

No system connected to the Internet can ever be guaranteed to be completely secure.

However, we continually review and improve our security practices with the objective of maintaining an appropriate level of protection.