Controller and contact
JKM property investments operates PlannerBuild and is responsible for personal information processed for this service. Contact [email protected] or write to 71-75, Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Use these details for privacy requests and questions.
Information and purposes
Enquiries
If you email us, we receive your address, message and information you provide. We use it to answer your request and, where relevant, take steps towards providing a service at your request (UK/EU GDPR Article 6(1)(b)); otherwise our legitimate interest in responding to business enquiries is the basis (Article 6(1)(f)). Do not send unnecessary sensitive information.
Enquiry retention is 30 days from receipt. We delete ordinary enquiry messages and attachments within that period. If a message is required for a separate contractual or legal record, we restrict and retain only the necessary record under that purpose rather than keeping the general enquiry indefinitely.
Projects and accounts
The software stores local drafts and preferences in your browser, including project files and locally imported assets. They are not sent to us merely because you edit a local draft. Browser storage can be cleared or become unavailable; keep downloaded backups. If you sign in and choose cloud saving, upload assets, request AI services or make a purchase, the relevant project data, account identifiers, requests and transaction information are processed to deliver that feature. The basis is performance of the service contract or requested pre-contract steps.
Supabase supports authentication and account storage, Railway supports the application API, Cloudflare delivers and protects the website, and Stripe handles payment services. AI generation is an optional application feature; only use it with information you are permitted to submit. Provider processing also follows the applicable provider terms and privacy information. We do not sell project data or use enquiry messages for advertising.
Security and delivery
Service providers process connection information such as IP address, request time and browser details to deliver and protect the service. Our legitimate interests are reliable delivery, abuse prevention and security; legal obligations may also apply. Security and provider logs follow their configured retention and contractual requirements. The 30-day enquiry rule is not a claim that all provider logs, cloud projects or financial records are deleted after 30 days.
Optional analytics
Analytics remain off unless you explicitly accept them. With consent, our own relay sends limited page and project-use events to the existing PostHog service in the United States. These use a shared aggregate identifier, not an account ID or unique visitor profile. Events may include a recognised landing-page path and restricted campaign labels; they do not include project names, email addresses, project content, full query strings or your IP address in the analytics payload. We do not load an advertising SDK on the marketing pages.
The relay strips identifying request information before sending the event. Cloudflare still handles the original connection for delivery and security. Consent is the basis for optional analytics and related storage. You can withdraw through Cookie settings at any time, without losing access to the software; withdrawal does not affect earlier lawful processing.
Retention and deletion
Local project storage remains on your device until you delete it, clear browser data or the browser removes it. Account and cloud project records are kept to provide your requested account and features until deletion is requested or another applicable retention requirement applies. Financial and dispute records may need separate statutory retention. Contact us to request deletion and details of an applicable record. We minimise retained records and review whether continued retention is necessary.
Cookie choices expire after 180 days. Anonymous aggregate analytics follow the PostHog project configuration and cannot be matched to an identifiable user for an individual deletion request. We do not promise an unverified provider retention setting. Contact us for current provider and retention information.
Recipients and international transfers
Access is limited to authorised personnel and providers needed for hosting, email, accounts, cloud storage, payments, security and requested optional features. Necessary information may be disclosed when required by law. Some providers or subprocessors may process information outside the UK or EEA. Where personal data is transferred, applicable adequacy decisions or appropriate contractual safeguards are required, including EU standard contractual clauses and the UK addendum or IDTA as relevant. Ask us for the safeguards applicable to your data. A cookie banner does not itself establish those contractual safeguards.
Your rights
Depending on the processing and applicable law, you can request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You can withdraw consent at any time. Email [email protected]; we may need proportionate verification and normally respond within one month. We will explain any lawful exception or extension.
You may complain to the UK Information Commissioner’s Office or your relevant EEA supervisory authority without contacting us first. The service is aimed at construction businesses, not children, and we do not knowingly solicit children’s personal information.
AI disclosure
We do not use website analytics to make decisions with legal or similarly significant effects about you. AI was used to help create this website and generate some images. Illustrative diagrams are not technical instructions. Optional AI application outputs require your own review and do not replace professional advice.
Changes
We update this policy when processing changes and show the date above. Read the cookie and browser-storage policy for controls. Material changes requiring new consent are not accepted merely because you continue browsing.