Privacy Policy
Effective date: 30 August 2026
Last updated: 30 August 2026
1. Introduction
BRAND BOA (“BRAND BOA,” “we,” “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and disclose personal information when you:
- Visit https://brandboa.com/
- Contact us or request a quotation
- Purchase or enquire about our services
- Submit architectural, structural, civil or MEP drawings
- Subscribe to our marketing communications
- Interact with our content, advertisements or affiliate links
BRAND BOA provides construction quantity take-off, cost-estimating and related services to customers in the United Kingdom and the United States.
For the purposes of UK data-protection law, the data controller is:
Legal business name: BRI BOA Ltd.
Trading name: BRAND BOA
Registered address: **Suite 41 , 101 Clapham High Street, Clapham , London , SW4 7TB , UK . England **
Privacy email: contact@briboa.com
Depending on how you interact with us, we may collect the following information:
- Identity information: Your name and job title.
- Contact information: Your email address, telephone number, business address and billing address.
- Business information: Your company name, trade, industry and project role.
- Project information: Architectural drawings, structural drawings, MEP plans, specifications, bills of quantities, project addresses and other documents you provide.
- Transaction information: Details of quotations, services purchased, invoices and payments.
- Communication information: Emails, enquiries, messages, feedback and customer-support correspondence.
- Technical information: Your IP address, browser type, operating system, device information, time zone and website activity.
- Usage information: Pages visited, links clicked, time spent on the website and referring websites.
- Marketing information: Your communication preferences and responses to marketing campaigns.
Payment information may be processed directly by a third-party payment provider. We do not intentionally store complete payment-card details.
Please remove unnecessary personal or confidential information from construction drawings and other project documents before submitting them to us.
We may collect personal information:
- Directly from you when you complete a form, send an email, request a quote or purchase a service.
- From your employer, business partner, contractor or authorised representative.
- Automatically through cookies, analytics tools and similar technologies.
- From publicly available sources, professional directories and business websites.
- From advertising, marketing and referral partners.
We may use personal information to:
- Respond to enquiries and prepare quotations.
- Review drawings and provide quantity take-offs, cost estimates and related services.
- Manage projects, contracts, payments and customer relationships.
- Communicate with customers about projects and service delivery.
- Verify payments and maintain financial records.
- Operate, maintain and improve our website.
- Monitor website performance and understand how visitors use it.
- Protect our website, business and customers against fraud, misuse and security threats.
- Comply with tax, accounting, legal and regulatory obligations.
- Send service updates and marketing communications where permitted.
- Establish, exercise or defend legal claims.
5. UK Lawful Bases for Processing
When UK data-protection law applies, we process personal information under one or more of the following lawful bases:
- Contract: Processing is necessary to provide a quotation, enter into an agreement or deliver the services you requested.
- Legitimate interests: Processing is necessary to operate and improve our business, respond to business enquiries, protect our systems, prevent fraud and maintain customer relationships.
- Consent: You have consented to marketing communications, non-essential cookies or another specific use of your information.
- Legal obligation: Processing is necessary to comply with tax, accounting, regulatory or other legal requirements.
- Legal claims: Processing is necessary to establish, exercise or defend legal rights.
Where processing depends on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
- Keep the website operating correctly.
- Remember your preferences.
- Measure website traffic and performance.
- Understand how visitors use our pages.
- Support marketing and advertising activities.
Where required by law, we will obtain your consent before placing analytics, advertising or other non-essential cookies on your device. You can accept, reject or manage these cookies through our **COOKIE SETTINGS. **
You can also control cookies through your browser settings. Disabling certain cookies may affect how some parts of the website function.
Further information should be provided in our separate Cookie Policy.
7. Marketing Communications
We may send you relevant information about our services where you have provided consent or where another lawful basis permits us to do so.
You can stop receiving marketing communications at any time by:
- Clicking the unsubscribe link in an email.
- Contacting us at contact@briboa.com
- Updating your communication preferences, where available.
We may still send essential communications relating to quotations, active projects, invoices, security or services you have purchased.
We may share personal information with trusted third parties where reasonably necessary, including:
- Website-hosting and cloud-storage providers.
- Email, communication and customer-management providers.
- Payment processors and financial institutions.
- Analytics, advertising and marketing providers.
- Estimators, consultants and subcontractors assisting with service delivery.
- Accountants, insurers, auditors and legal advisers.
- Government authorities, regulators or law-enforcement bodies when legally required.
- Parties involved in a potential merger, acquisition, financing or sale of our business.
These parties may only use personal information for the agreed purpose and must protect it in accordance with applicable law and contractual requirements.
We do not disclose customer drawings or project documents to unrelated third parties for their independent marketing purposes.
9. International Data Transfers
Because BRAND BOA works with customers and service providers in the United Kingdom, the United States and potentially other countries, personal information may be transferred outside the country in which it was collected.
Where UK law applies, we use recognised safeguards for restricted international transfers where required. These may include:
- Transfers to countries covered by UK adequacy regulations.
- The UK International Data Transfer Agreement.
- The UK Addendum to approved standard contractual clauses.
- Other legally recognised safeguards or exceptions.
Although privacy laws vary between countries, we take reasonable steps to ensure that transferred information receives appropriate protection.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting and contractual requirements.
Our general retention periods are:
- Unsuccessful enquiries and quotations: Up to 24 months.
- Customer and project records: For the duration of the project and generally up to seven years afterwards.
- Invoices and financial records: Up to seven years or longer when legally required.
- Project drawings and take-off documents: Generally up to two years after project completion, unless a longer period is agreed or required.
- Marketing information: Until you unsubscribe or withdraw consent.
- Cookie and analytics information: According to the duration stated in our cookie-management system or Cookie Policy.
We may retain information for longer where necessary to resolve a dispute, enforce an agreement or comply with a legal obligation.
We use reasonable administrative, organisational and technical safeguards designed to protect personal information against:
- Unauthorised access.
- Accidental loss or destruction.
- Improper alteration or disclosure.
- Fraudulent or unlawful use.
However, no website, email service or internet transmission is completely secure. You should use an appropriate secure method when sending confidential, commercially sensitive or large project files.
12. Your UK Privacy Rights
If UK data-protection law applies to you, you may have the right to:
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information in certain circumstances.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Request the transfer of certain information in a portable format.
- Withdraw consent where processing depends on consent.
- Raise a concern or complaint about how your information is handled.
These rights are not absolute, and legal exceptions may apply. We may request information to verify your identity before responding.
You may also complain to the UK Information Commissioner’s Office through https://ico.org.uk/make-a-complaint/.
13. Privacy Rights for United States Residents
Depending on your state of residence and whether the relevant law applies to BRAND BOA, you may have the right to:
- Confirm whether we process your personal information.
- Access the personal information we hold about you.
- Correct inaccurate personal information.
- Request deletion of personal information.
- Obtain a portable copy of certain information.
- Opt out of the sale of personal information.
- Opt out of targeted advertising or the sharing of information for cross-context behavioural advertising.
- Opt out of certain automated profiling decisions.
- Limit certain uses of sensitive personal information.
- Appeal a decision concerning a privacy request.
- Exercise your rights without unlawful discrimination.
To submit a request, email** with the subject line **“US Privacy Request.”
We may need to verify your identity before completing a request. Where permitted, you may appoint an authorised agent to act on your behalf.
14. California Privacy Notice
This section applies only where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to BRAND BOA.
During the preceding 12 months, we may have collected the following categories of personal information:
- Identifiers, such as names, email addresses, telephone numbers, IP addresses and billing addresses.
- Commercial information, such as quotations, purchases, invoices and project history.
- Internet or electronic-network activity, such as browsing and website-interaction information.
- Professional information, such as company name, occupation, job title and trade.
- Approximate location information derived from an IP address.
- Customer communications, project documents and other information submitted to us.
We collect and use these categories for the business purposes described in this Privacy Policy. We may disclose them to service providers, contractors, advisers and other parties described in Section 8.
We do not sell personal information in exchange for money. However, certain analytics or advertising cookies may be legally considered “sharing” or targeted advertising under some US state privacy laws. Where applicable, you can opt out through our consent link.
Where required, we will also recognise valid browser-based opt-out preference signals, such as Global Privacy Control.
We do not knowingly sell or share the personal information of individuals under 16 years of age.
15. Affiliate and Third-Party Links
Our website may contain affiliate links or links to third-party websites, products and services. If you follow an affiliate link and make a purchase, BRAND BOA may receive a commission at no additional cost to you.
Third-party websites operate independently and have their own privacy policies. This Privacy Policy does not govern how those third parties collect or use your information. We recommend reviewing their privacy policies before providing personal information.
16. Children’s Privacy
Our website and services are intended for businesses and adults. They are not directed at children under 13 years of age, and we do not knowingly collect personal information from children.
If you believe that a child has submitted personal information to us, please contact us so that we can review and, where appropriate, delete it.
17. Automated Decision-Making
We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.
If this changes, we will update this Privacy Policy and provide any notices or choices required by law.
18. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technologies or legal obligations change. The revised version will be posted on this page with a new “Last updated” date.
Material changes may also be communicated through the website or by email where appropriate.
For questions, privacy requests or complaints, contact:
BRAND BOA
Legal business name: BRI BOA Ltd.
Address: **Suite 41 . 101 Clapham High Street, Clapham, London , SW4 7TB . UK . ENGLAND **
Email: contact@briboa.com
Website: https://brandboa.com/
