Purpose-based processing
Control public visibility
Access and security controls
Access and correction
1. Scope and responsibilities
This policy applies to personal information processed by the BuildBridge platform operator through its website, mobile pages, accounts, business workspace, professional workspace, property requests and resource services.
When a business enters information about its employees, contractors, customers or contacts, it generally determines the purposes and methods of collection. BuildBridge provides hosting and processing on its instructions. The business must notify the people concerned and obtain any authorisation required by applicable law.
2. Information we collect
- Account and identity information: Names, display names, email addresses, phone numbers, photos, language, country, city, account roles, sign-in and verification status. Third-party sign-in, such as Google, supplies basic account information when used.
- Property requests: Project category, description, address or service area, budget, timing, photographs, drawings, drafts, quotations and communications.
- Professional information: Trades, skills, experience, service areas, portfolio photos, qualifications and licences, reviews, employment preferences, public profile settings, business invitations and schedules.
- Business and employee information: Business name, NZBN or other registration information, contact details, sites, customer information, employee names and phones, roles, worker types, schedules, attendance, breaks, hours, daily reports, work photos, leave, purchases and operational records. Licence or identity images are collected only where a specific workflow expressly requires them.
- Location information: Selected country and city, address suggestions and map coordinates. When attendance or site verification is enabled, location evidence may be collected at the time of the user’s action. The relevant screen explains its purpose and permissions.
- Technical and usage information: IP address, device and browser type, page visits, times, error logs, security events and identifiers created by cookies or similar technologies.
- Payment information: Plans, invoices, transaction status and payment references. Payment providers generally process full card details directly; BuildBridge receives only the limited information needed to complete the transaction.
3. Sources of information
Information may come directly from you, a business administrator or inviter, a sign-in or accounting service you authorise, your use of the platform, or lawfully available public business registers and industry sources. Anyone supplying information about you must have appropriate authority and notify you.
4. How we use information
- Create, verify and protect accounts, maintain sign-in sessions and provide workspaces for the relevant identities.
- Save request drafts, receive submitted requests, organise project information and suggest professionals or businesses by category and area.
- Create public professional and business profiles and portfolios within the visibility settings chosen by users.
- Support worker invitations, sites, schedules, attendance, hours, daily reports, photos, leave and business records.
- Send account verification, invitations, schedule changes, messages, service updates and promotional communications users choose to receive.
- Provide support, handle complaints and disputes, prevent fraud and misuse, enforce terms and comply with legal obligations.
- Analyse use, fix problems and improve availability, security and matching quality. Matching and ranking provide suggestions; relevant people should confirm decisions with significant legal or comparable effects on individuals.
5. Public profiles and user-controlled sharing
Professionals and businesses may choose to create public profiles. Public fields may include a display name, photo or logo, trade, skills, service areas, introduction, portfolio, qualification summaries and review summaries. Internal employee records, schedules, hours, daily reports, private contact details, exact addresses and photos not expressly made public are not public by default.
Property requests are handled within the sharing scope selected on submission. Sharing a phone number, email address or exact site address with a particular provider requires the relevant confirmation. You may stop public display or withdraw future sharing using available settings. Copies lawfully retained by others may not be automatically removable from their systems.
7. Overseas storage and processing
BuildBridge’s cloud and technology providers may process data in New Zealand, Australia, the United States, Singapore or other countries. We use contracts, provider reviews, access controls and other reasonable measures under applicable law to require appropriate protection by recipients.
8. Retention
We retain information only as needed to provide services, maintain accounts, fulfil contracts, resolve disputes, audit security and meet tax, employment, company or other legal obligations. Public display will stop within a reasonable time after account closure. Some billing, transaction, hours, audit, complaint and security records may need to be retained by law. When identification is no longer needed, we delete, de-identify or securely isolate information.
9. Security and data incidents
We use reasonable measures such as role-based access, authentication, encryption in transit, restricted file access, logs and audits, backups and supplier management. No internet service can guarantee absolute security. If a data incident meets applicable notification thresholds, we will assess its impact and make the required notifications to regulators and affected people.
10. Your privacy rights
Depending on your location and applicable law, you may request access or a copy of your information, correction, deletion or restricted processing; withdraw consent; object to certain uses; stop public display; unsubscribe from promotion; or complain. Requests may be subject to identity verification, other people’s rights, legal retention obligations and statutory exceptions.
You may update information in account settings or contact us to submit a request. We respond within applicable legal time limits. If dissatisfied, you may complain to the relevant privacy regulator, such as the New Zealand Office of the Privacy Commissioner.
12. Children’s privacy
Independent registration, service contracts, requests and work arrangements are intended for users with the necessary legal capacity. Minors should be assisted by a parent, guardian or lawfully authorised business under local law. Contact us if you believe we have collected a child’s information without appropriate authorisation.
13. Updates, contact and complaints
We may update this policy when features, providers or laws change. Material changes will be communicated through page notices, account notifications or other reasonable means, with an updated effective date.
Privacy contact: Contact the BuildBridge privacy officer at admin@buildbridge.nz or through the contact form. State your name, account email, country and request. Do not send full identity-document numbers or passwords in ordinary messages.