01Who we are & what this policy covers
This Privacy Policy explains how BRAND BOA collects, uses, stores and shares personal information when you visit our website, request a quotation, use our construction estimating and quantity take-off services, submit project documents, subscribe to updates or interact with our affiliate content.
BRAND BOA is the trading name of BRI BOA Ltd., the controller responsible for the personal information described in this policy where we determine why and how it is used.
Legal business: BRI BOA Ltd., trading as BRAND BOA
Address: Suite 41, 101 Clapham High Street, Clapham, London, SW4 7TB, England, United Kingdom
Privacy email: contact@briboa.com
Website: brandboa.com
Our services support customers in the United Kingdom and United States. The rights available to you depend on the laws that apply to your information. This policy is separate from our service terms and any confidentiality agreement.
02Information we collect
- Identity and business details: your name, job title, company, trade and project role.
- Contact details: email, telephone number, business address and billing address.
- Project information: project addresses, drawings, specifications, schedules, photographs, BOQs and other documents you supply. These may identify owners, occupants, designers or contractors.
- Service and transaction records: enquiries, quotations, agreed scope, invoices, payment status and project history.
- Communications: correspondence, feedback, requests and complaints.
- Technical and usage information: IP address, browser and device details, referring pages and activity on our website, depending on the tools used and your choices.
- Marketing preferences: subscriptions, consent records, opt-outs and interactions with communications.
Payment providers may process payment information directly. We do not intentionally store complete payment-card details. Please do not send card numbers, passwords, identity documents or unnecessary sensitive personal information with an enquiry.
03How information reaches us
We receive information directly when you contact us, complete forms, request a quote, purchase services or send files. We may also receive project and business contact information from your employer, client, contractor, designer or authorised representative.
Technical information may be collected by the website and its service providers. Marketing and referral partners may provide referral information, and we may obtain relevant business contact details from public business websites and professional directories.
Where we obtain information from another source, you can ask us about its origin. We provide additional privacy information where required.
Providing information is generally voluntary. However, without the contact, billing or project details needed for a particular service, we may be unable to quote, deliver the work or meet record-keeping obligations. Marketing consent is not a condition of purchasing estimating services.
04Project drawings & confidentiality
We use the drawings and project documents you submit to assess the requested scope, prepare quotations, carry out measurements, produce estimates or BOQs, review our work and manage revisions.
Access is limited to authorised personnel and service providers who need the information for the agreed work. We do not disclose customer drawings or project documents to unrelated parties for their independent marketing.
Before sending files, remove personal details that are not needed for the work. If documents identify other people, ensure you have authority to share them and provide appropriate privacy information to those individuals.
Where we process personal information solely on a customer’s documented instructions, our processor responsibilities are governed by the applicable service and data-processing arrangements. That customer remains responsible for its own controller obligations. Contact us before sending particularly sensitive documents to agree an appropriate transfer method or discuss a confidentiality agreement.
05Why we use information & our lawful bases
Where UK data-protection law applies, our purposes and lawful bases are set out below. The basis depends on the relationship and the particular information involved.
| Purpose | Lawful basis |
|---|
| Prepare a requested quote and deliver contracted services to you. | Contract, including steps you request before entering a contract. |
| Communicate with business representatives and manage customer relationships. | Legitimate interests in operating our business and delivering services to business customers. |
| Secure systems, prevent fraud and investigate misuse. | Legitimate interests in protecting our business, customers and systems; legal obligation where applicable. |
| Maintain tax, accounting and other mandatory records. | Legal obligation. |
| Handle disputes and establish or defend legal claims. | Legitimate interests in protecting legal rights; legal obligation where processing is required by law. |
| Send marketing communications. | Consent where required; otherwise legitimate interests where electronic-marketing rules permit the communication. |
| Use optional analytics, advertising or affiliate-tracking technologies. | Consent where required. Any applicable statutory exception must be assessed separately. |
When relying on legitimate interests, we consider the impact on your privacy and balance our interests against your rights. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
06Cookies, analytics & tracking
Cookies and similar technologies can support website operation, remember choices, measure visits and attribute advertising or affiliate referrals. The information involved may include device identifiers, IP addresses, pages viewed and link interactions.
Technologies strictly necessary for a service you request may operate without consent. Where consent is required for analytics, advertising or other optional tracking, it must be obtained before that technology is used. Visiting this page or submitting an enquiry does not itself give consent to optional tracking.
Where a cookie consent panel is displayed, use its controls to accept, reject or change optional choices. Browser settings can also block or delete cookies, although this may affect website functions and does not necessarily remove information already collected. Contact us if you need help withdrawing a choice.
Cookie-specific information, including providers, purposes and durations, should be read alongside this policy in the website’s cookie disclosures. Third-party websites reached through links have their own tracking practices.
07Marketing & your choices
Our updates may include estimating guidance, construction resources, product recommendations and affiliate offers. We send marketing where you have consented or where the applicable marketing rules otherwise permit it.
You can unsubscribe using the link in a marketing email or email contact@briboa.com. We may retain a minimal suppression record to respect your preference.
Your right to object to marketingYou can object to the use of your personal information for direct marketing at any time, including related profiling. We will stop using it for that purpose.
Unsubscribing does not stop necessary messages about your enquiries, agreed work, invoices or security.
08Who we share information with
Where needed for the purposes described in this policy, recipients may include:
- Website hosting, cloud storage, email and customer-management providers.
- Estimators, consultants and subcontractors involved in the agreed service.
- Payment processors, banks and financial service providers.
- Analytics, advertising, marketing and affiliate providers, subject to applicable choices and requirements.
- Accountants, auditors, insurers and legal advisers.
- Authorities and regulators where disclosure is required or otherwise lawful.
- Potential purchasers and advisers in a business reorganisation or sale, subject to appropriate confidentiality protections.
Providers processing information on our behalf must follow appropriate instructions and contractual protections. Some recipients, such as banks or professional advisers, may act as independent controllers with their own legal responsibilities and privacy notices.
09International transfers
Our customers and service providers may be located in the UK, US or other countries. Information may therefore be stored in, accessed from or transferred to a country outside the UK.
Where a restricted transfer is subject to UK law, we use an applicable lawful transfer mechanism. Depending on the recipient and destination, this may be UK adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum, together with any required assessment and additional measures.
Contact contact@briboa.com to ask about relevant destinations or obtain information about the safeguards applying to your information, subject to necessary redactions.
10How long we keep information
We keep information only as long as needed for the purpose, taking account of the nature of the records, legal requirements, agreed work and potential disputes. Our stated general retention periods are:
- Unsuccessful enquiries and quotations
- Up to 24 months.
- Customer and project administration records
- For the project duration and generally up to seven years afterwards.
- Invoices and financial records
- Up to seven years, or longer where legally required.
- Project drawings and take-off documents
- Generally up to two years after completion, unless a longer period is agreed or required.
- Marketing records
- Until you unsubscribe or withdraw consent, with limited records retained where needed to demonstrate consent or honour an opt-out.
- Cookies and analytics
- For the durations applying to the relevant technology and disclosed through the website’s cookie information.
Different periods may apply to different parts of the same project file. A legal hold, dispute or statutory requirement may justify longer retention. When information is no longer needed, we delete it or anonymise it as appropriate; backup copies are removed through the applicable backup lifecycle.
11Keeping information secure
We use reasonable technical and organisational measures designed to reduce the risk of unauthorised access, disclosure, alteration or loss. The protections used should reflect the sensitivity of the information and the risks involved.
No online system or transmission can be guaranteed completely secure. Contact us to arrange an appropriate method before sending confidential or unusually sensitive project material. If you suspect your information has been exposed or misdirected, notify us promptly using the privacy contact below.
12Your UK privacy rights
Subject to the applicable conditions and exemptions, you may request access to your information, correction, erasure, restriction of processing and portability of qualifying information. You may also withdraw consent where processing relies on it.
Your right to objectYou can object to processing based on legitimate interests because of your particular circumstances. Your right to object to direct marketing applies at any time.
Email contact@briboa.com and describe the request. We may ask for proportionate information to verify your identity or clarify its scope. We respond within the time required by applicable law and explain any lawful extension or refusal. Requests are generally free of charge, subject to legal exceptions.
13United States privacy requests
Depending on your state of residence and whether its privacy law applies to our business, you may have rights to access, correct, delete or obtain a portable copy of your information; opt out of sale, targeted advertising or certain profiling; and appeal a declined request. Some laws also provide rights concerning sensitive information.
Email contact@briboa.com with the subject “US Privacy Request”. Identify your state and the right you wish to exercise. We may verify your identity and an authorised agent’s authority where permitted. To appeal a decision where that right applies, reply to our decision or email us with “Privacy Appeal”. We will explain the outcome and any further complaint route required by law.
We do not unlawfully discriminate against people for exercising applicable privacy rights.
14Additional information for California residents
This section applies where the California Consumer Privacy Act, as amended, applies to BRAND BOA. The information described in this policy may fall within identifiers, customer records, commercial information, internet activity, professional information, approximate location derived from an IP address and information supplied in correspondence or project documents.
The collection sources, purposes, recipient categories and retention practices are described in the sections above. Applicable rights include knowing and accessing information, correction, deletion, opting out of sale or sharing, and limiting qualifying uses of sensitive personal information.
We do not sell personal information for money. Advertising and some tracking arrangements may nevertheless constitute a “sale” or “sharing” under California law. Where applicable, you may request an opt-out by emailing contact@briboa.com. Applicable browser-based opt-out signals, including Global Privacy Control, must also be honoured where required.
We do not knowingly sell or share personal information of individuals under 16.
15Affiliate links & external websites
Some product, software or supplier links are affiliate links. If you follow one and make a qualifying purchase, BRAND BOA may receive a commission at no additional cost to you. Affiliate providers may use referral identifiers, cookies or transaction attribution information to recognise the referral, subject to applicable consent requirements.
External websites operate under their own privacy notices. Review the destination website’s policy before providing information or purchasing. This policy covers BRAND BOA’s own handling of information.
16Children’s information
Our website and estimating services are intended for businesses and adults and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.
17Automated decisions
We do not currently use personal information for solely automated decisions that have legal or similarly significant effects on individuals. If this changes, we will explain the relevant processing and provide the notices and safeguards required by law.
18Updates to this policy
We may update this policy when our services, systems or legal obligations change. The latest version will appear on this page with an updated revision date. We will provide further notice of significant changes where required; a policy update does not replace any consent required for a new use of information.
19Contact us & raise a concern
For a question, privacy request or complaint, contact BRI BOA Ltd., trading as BRAND BOA.
Email: contact@briboa.com
Post: Suite 41, 101 Clapham High Street, Clapham, London, SW4 7TB, England, United Kingdom.
Please describe your concern and the outcome you are seeking. We will review your complaint and respond under the applicable legal requirements.
You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You do not have to use our internal process before approaching the regulator. Where another jurisdiction’s law applies, you may also have a right to contact the relevant regulator.
