Privacy Policy

Scope and current status

This notice explains how the STRUCTURA website and connected product previews handle personal information. The current release is a staged platform preview: account authentication, permanent project storage, live service-enquiry delivery and general file uploads are not connected unless a specific screen clearly states otherwise.

Features can change as services are activated. A material change to data handling must be reflected in this policy before that feature is enabled.

Information the service may process

Depending on the feature used, the service may process:

• technical request information normally received by a website, such as an IP address, browser or device information, requested pages, timestamps and security logs;
• calculator inputs, project references, locations, dimensions, quantities and other information entered into a workspace;
• address-search text submitted through the wind-actions location search;
• contact, company and project information entered into a service-enquiry preview; and
• prompts, files or generated outputs if an AI, upload, account or storage feature is expressly activated in a future release.

Do not enter confidential, commercially sensitive, personal or legally protected information unless the screen confirms that the feature is live, you are authorised to provide it, and you understand how it will be processed.

What the current preview does

• Service-enquiry forms prepare an on-screen preview but do not currently email or permanently save the enquiry.
• Files selected in preview upload controls are not currently uploaded by those controls.
• Authentication, organisations, memberships and persistent project storage are not currently connected.
• Some calculations run in the browser or through a STRUCTURA calculation endpoint. Users should avoid placing personal information in calculator fields.
• The address-search endpoint uses a short-lived in-memory request counter for rate limiting and forwards the search phrase to the Ordnance Survey Places API when configured.

These statements describe the repository’s current implementation and must be rechecked before production services are enabled.

Why information is used

Information may be used only as needed to provide the requested feature, calculate or display a result, protect the service, prevent abuse, diagnose faults, respond to an enquiry when delivery is enabled, meet legal obligations, or improve the service using appropriately controlled and, where practical, aggregated information.

Information should not be used for a materially different purpose without an appropriate legal basis and an updated notice.

AI processing

AI tools have been used extensively to develop, review and maintain this website, its connected applications and their content. The platform should therefore be treated as AI-developed, and its content and outputs as AI-generated or AI-assisted, even where reviewed by our team. This disclosure does not by itself mean that information you enter is sent to a live AI model.

If a live AI feature processes prompts, uploaded files or other user information, the relevant screen must explain whether that information and resulting outputs are sent to a model provider, retained, reviewed by people or used for model improvement. STRUCTURA should not enable the use of customer content for general model training without a clear legal basis and an appropriately prominent notice or consent mechanism. See the AI-Generated Content Disclaimer for output limitations.

Cookies, consent and advertising

The codebase contains consent-controlled Google AdSense placements. Live advertising scripts are designed to load only when advertising is configured and consent has been granted. If advertising is enabled, Google and its partners may process device, cookie, advertising and interaction information under their own notices.

A production consent-management experience, cookie inventory, consent withdrawal control and jurisdiction-specific disclosures must be approved before personalised or non-essential advertising is activated.

Service providers and international processing

Information may be processed by hosting, security, analytics, communications, storage, AI or specialist data providers only where required for an enabled feature. Current code includes an optional Ordnance Survey Places API integration and optional consent-controlled Google AdSense integration.

The final list of production processors, their locations, contractual safeguards and international transfer mechanisms must be maintained by the product owner and reflected here before the corresponding services are activated.

Retention and deletion

The current preview does not intentionally create account, enquiry or uploaded-file records through the disabled features described above. Hosting and security systems may still retain limited technical logs according to their configured schedules.

Exact production retention periods have not yet been approved. Each live data category must receive a documented retention period, deletion process and backup treatment before collection begins. Information should be retained only for as long as needed for its stated purpose, legal duties, security or the resolution of disputes.

Security and user responsibility

Reasonable technical and organisational safeguards should be applied in proportion to the sensitivity of the information. No internet service can guarantee absolute security. Users must protect credentials, limit submissions to necessary information and promptly report suspected unauthorised access.

Users uploading or entering information must have the rights and permissions required to do so, including for client-owned, copyrighted, confidential or personal information.

Privacy rights

Depending on applicable law, individuals may have rights to ask for access, correction, deletion, restriction, objection, portability or withdrawal of consent, and may be able to complain to a competent supervisory authority.

The production operator must publish a verified privacy contact and identity-verification process before live personal-data collection is enabled. Until then, do not submit personal information through preview-only features.

Children, changes and contact

The platform is intended for professional and higher-education use and is not designed for children to provide personal information independently. Material policy changes should be dated and, where appropriate, brought to registered users’ attention.

Publication requirement: the legal entity name, registered address, privacy email or request form, representative details where required, supervisory-authority information and policy owner remain to be confirmed before this notice is final.