Privacy Policy

Last updated: 16 October 2026

Artechlabs Ltd ("Artechlabs", "we", "us", "our") is committed to protecting the privacy and security of personal data processed through the Conforma platform ("Conforma", the "Platform"). This Privacy Policy explains what personal data we collect, how it is used, and the rights available to individuals whose data we process, in line with applicable data protection law, including the UK GDPR and Data Protection Act 2018, and equivalent regulations in the jurisdictions where Conforma is deployed.

Scope

This policy applies to personal data processed by Artechlabs in connection with the Conforma platform, including data relating to Client personnel, site users, and consultants who access or are referenced within the Platform. It does not cover the separate privacy practices of third-party websites linked from the Platform.

Our Role

  • Where Artechlabs processes personal data on behalf of a Client organisation to provide the Service (for example, user account details or inspection records containing personal data), Artechlabs acts as a data processor and the Client acts as data controller.
  • Where Artechlabs processes personal data for its own business purposes (for example, commercial contacts, billing, or marketing), Artechlabs acts as data controller.

Personal Data We Collect

  • Account & contact data: name, job title, company, email address, and phone number of Users.
  • Platform usage data: login activity, actions taken within the Platform, and system logs.
  • Project & inspection data: information entered into inspection requests — including via WhatsApp submissions from authorized site engineers — which may incidentally include personal data such as names of site personnel or inspectors, phone numbers, and inspection details.
  • Device & technical data: IP address, browser type, and device identifiers collected automatically when using the Platform.
  • Billing data: invoicing and payment contact details for the Client organisation.

Purposes & Legal Basis for Processing

  • To provide, configure, and support the Platform — necessary for performance of the contract with the Client.
  • To maintain the security and integrity of the Platform — necessary for our legitimate interests in preventing misuse and unauthorised access.
  • To communicate with Users about service updates, support matters, or account administration — necessary for performance of the contract or our legitimate interests.
  • To comply with legal and regulatory obligations, including billing and tax records — necessary for compliance with a legal obligation.
  • To send product updates or marketing communications, where consent has been given or another lawful basis applies, with an option to opt out at any time.

WhatsApp Messaging

Only phone numbers explicitly authorized by a project administrator can raise Inspection Requests or attach files via our WhatsApp Business number. Messages sent to our WhatsApp Business number are processed to extract inspection details and are not used for any purpose outside operating this service. WhatsApp is operated by Meta; your use of WhatsApp itself is also subject to Meta's own privacy policy.

Data Storage & Security

Personal data is stored on secure cloud infrastructure with access controls, encryption in transit, and regular security review. Access to Client Data within the Platform is restricted to authorised personnel on a need-to-know basis, and to Artechlabs staff or sub-processors who require access to provide or support the Service.

Data Retention

Personal data is retained for as long as necessary to provide the Service and to fulfil the purposes described in this policy, including any applicable legal, accounting, or reporting requirements. Following termination of an Agreement, Client Data is retained for a reasonable transition period to allow export, after which it is deleted or anonymised in accordance with our data retention schedule, unless a longer period is required by law.

Data Sharing & Sub-Processors

  • We do not sell personal data.
  • Personal data may be shared with trusted sub-processors who support hosting, infrastructure, or platform functionality, under contractual obligations of confidentiality and data protection equivalent to this policy.
  • Personal data may be disclosed where required by law, regulation, or valid legal process.
  • Personal data relevant to an inspection or workflow may be visible to other authorised parties on the same project (for example, consultants or client representatives) as configured by the Client, as this visibility is intrinsic to the Service.

International Data Transfers

Where personal data is transferred outside the country in which it was originally collected, including transfers between the United Kingdom, the GCC region, or other jurisdictions in which Conforma operates, Artechlabs will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms recognised under applicable law.

Data Subject Rights

Subject to applicable law, individuals may have the right to: request access to their personal data; request correction of inaccurate data; request erasure of their data; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent. Requests should be directed to the contact details below. Where Artechlabs acts as a data processor on behalf of a Client, such requests will generally be directed to the relevant Client as data controller.

Data Breach Procedure

Artechlabs maintains procedures to detect, investigate, and respond to personal data breaches. Where required by law, affected individuals and relevant supervisory authorities will be notified without undue delay following discovery of a breach that poses a risk to individuals' rights and freedoms.

Children's Data

Conforma is a business-to-business construction workflow platform and is not intended for use by children. We do not knowingly collect personal data from children.

Changes to This Policy

This policy may be updated periodically to reflect changes in our practices or legal requirements. Material changes will be communicated to Clients in advance where reasonably practicable.

Contact

For questions about this policy or to exercise a data protection right, please contact: info@artechlabs.co.uk