Privacy Policy

The data controller responsible for your personal data is Urban Crest Homes ("we", "us", "our"). We operate the Urban Crest Homes client portal and online estimator platform at uc-homes.app.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us through the client portal.

We collect only the minimum personal data necessary to provide our services. This is limited to:

• Full name — used to personalise your account, project records, and communications.
• Email address — used to deliver quote estimates, project updates, invoices, and platform notifications.
• Phone number — optionally provided by you when submitting a quote request, used solely for direct project communication.
• Project details — property type, construction preferences, and estimated costs you enter when using the estimator tool, used exclusively to generate your project estimate.

We do not collect sensitive personal data (as defined under UK GDPR Article 9), financial payment card details, or any data unrelated to the delivery of our construction project management services.

We process your personal data for the following purposes and on the following legal bases:

The security of your personal data is of paramount importance to us. We implement the following technical and organisational measures to protect your information:

• All data is encrypted in transit using industry-standard TLS (Transport Layer Security) encryption.
• All data is encrypted at rest within our secure cloud infrastructure.
• Access to personal data is strictly limited to authorised Urban Crest Homes personnel on a need-to-know basis.
• Our platform infrastructure undergoes regular security reviews and updates to protect against unauthorised access, loss, or disclosure.
• User accounts are protected by authenticated access controls; we do not store passwords in plain text.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) as required by UK GDPR within 72 hours of becoming aware of the breach.

We do not share your personal data with advertisers, data brokers, analytics companies, or any other commercial third parties. Your information is used solely for the purposes set out in this Privacy Policy.

The only circumstances under which we may disclose personal data to third parties are:

• Service providers acting as data processors on our behalf — for example, our email delivery provider (Brevo) used solely to transmit quotes and notifications you have requested. These processors are contractually bound to process your data only on our instructions and in accordance with UK GDPR.
• Legal requirements — where we are required to disclose data by law, court order, or a regulatory authority (such as HMRC or the ICO).

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law:

• Active client accounts: Data is retained for the duration of your relationship with Urban Crest Homes and for up to 7 years thereafter, in accordance with UK financial and tax record-keeping obligations.
• Quote requests (no project conversion): Retained for up to 2 years for business analysis purposes, then securely deleted.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter as proof of compliance.

When data is no longer required, it is securely and permanently deleted from our systems.

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access — You may request a copy of the personal data we hold about you (Subject Access Request).
• Right to rectification — You may request that we correct inaccurate or incomplete personal data.
• Right to erasure — You may request that we delete your personal data where there is no overriding legal reason to retain it.
• Right to restriction of processing — You may request that we limit the way we use your data in certain circumstances.
• Right to data portability — You may request your data in a structured, commonly used, machine-readable format.
• Right to object — You may object to our processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us via the client portal. We will respond within one calendar month as required by UK GDPR. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

Our platform uses only essential session cookies required for authentication and secure access to your account. We do not use advertising cookies, third-party tracking pixels, or behavioural analytics tools that process personal data. No cookie consent banner is required for strictly necessary cookies under the Privacy and Electronic Communications Regulations 2003 (PECR).

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be communicated to registered users via email or a prominent notice on the platform. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the platform following any update constitutes acceptance of the revised policy.