1. Who we are
WPB Build is operated by WPB Holding Ltd, registered in England and Wales under company number 17520349. Its registered office is 5th Floor, 167–169 Great Portland Street, London, W1W 5PF.
For information used to run accounts, secure the service, provide support and communicate about WPB Build, WPB Holding Ltd is the controller. Contact us at privacy@wpbbuild.com.
2. Information we handle
Builders and workers
We handle account email addresses, names, login and security records, business profile information, job assignments, notification choices and support messages. A builder may also add a logo, telephone number, VAT settings and optional bank-payment details to show its own customers.
Homeowners and other customers
A builder may add a customer’s name, email address, mobile number, job address and job-related messages. Homeowners can use a private job link to view progress, ask questions and approve or query variations without opening an account.
Job content
WPB Build stores job stages, written updates, photographs, variation records, decision history, payment schedules, amounts and dates marked as paid. Photographs and notes may contain personal information about people at a site.
Website and early access
If you join the early-access list, we collect your email address, signup time and basic source information. Our servers also receive ordinary request and security information such as IP address, device or browser information, timestamps and error logs.
Information we do not seek
WPB Build does not process card payments, move customer money, use advertising trackers, collect precise location, access contacts or deliberately collect special-category information. Please do not place unnecessary sensitive information in job notes or photographs.
3. Why we use information
| Purpose | UK GDPR basis |
|---|---|
| Create accounts, provide job tools, deliver homeowner pages and support the service. | Contract, or steps requested before entering a contract. |
| Process worker, homeowner and job information for a building business. | The building business’s documented instructions. It is responsible for identifying its lawful basis. |
| Secure accounts, prevent misuse, diagnose faults and maintain reliable records. | Our legitimate interests in operating a safe and dependable service, and legal obligations where applicable. |
| Send service messages chosen by a builder to workers or homeowners. | Contract and the legitimate interests of the builder and job participants in receiving requested job information. |
| Respond to support, privacy and legal requests. | Contract, legitimate interests and legal obligations. |
| Send requested early-access news. | Consent. You can withdraw it at any time. |
We do not make decisions about people using solely automated processing that produces legal or similarly significant effects.
5. Security and private links
WPB Build uses account authentication, database row-level access controls, private file storage, short-lived photograph links and role restrictions. No online service can guarantee absolute security.
Homeowner pages use private job links. Anyone with a valid link may be able to open that job page, so builders and homeowners should treat the link as confidential. Builders can replace a link from the job settings if it is shared incorrectly.
We use only storage and authentication technologies needed to provide the service. We do not currently use advertising or cross-site analytics cookies.
6. How long we keep information
- Account and job information is kept while the account is active and until the builder deletes the job or account.
- After a valid account-deletion request, live account data is removed or anonymised within 30 days. Encrypted backups may retain it for up to 90 days before automatic replacement.
- Records that must be retained for tax, fraud prevention, disputes or other legal duties may be kept for up to six years or the relevant statutory period.
- Early-access email details are kept until consent is withdrawn or, if unused, no longer than 12 months after the public UK launch.
- Support correspondence is normally retained for up to 24 months after the issue closes.
- Routine security and application logs are normally retained for up to 90 days unless needed to investigate an incident.
A building business may set its own lawful retention requirements for customer and job records. Deleting information from WPB Build does not delete copies that another participant has independently downloaded or retained.
7. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, delete or restrict your information, object to certain uses, receive portable information, and withdraw consent.
If your information was entered by a building business, contact that business first because it is normally responsible for the request. You may also contact us and we will help route the request. We may need to confirm your identity before acting.
Account holders, including workers, can initiate deletion of their login from the Profile area. An owner can delete the whole business workspace. Job settings include controls for deleting an individual job and its customer information.
8. Children
WPB Build is a business and homeowner service for adults. It is not directed at children, and builder accounts must be operated by someone aged 18 or over.
9. Contact and complaints
Email privacy questions or requests to privacy@wpbbuild.com, or write to WPB Holding Ltd at 5th Floor, 167–169 Great Portland Street, London, W1W 5PF.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to resolve the concern first.
We may update this notice when WPB Build or the law changes. The date above shows the latest version.