Privacy Policy
Last updated: 5 June 2026
BACKGROUND:
PSC Pipeline Limited ("We") understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who uses the PSC Research Tool at https://research.pscpipeline.co.uk (https://research.pscpipeline.co.uk) ("Our Site") and will only collect and use personal data in ways that are described in this Privacy Policy and that are consistent with Our obligations and your rights under the law.
Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of this Privacy Policy is requested when you create an Account on Our Site.
Part 1: Definitions and Interpretation
In this Privacy Policy the following terms have the following meanings:
| Term | Meaning |
|---|---|
| "Account" | an account required to access and use the PSC Research Tool; |
| "AI Sub-processor" | a third-party provider of artificial intelligence services that processes your User Inputs to generate Reports, principally Anthropic PBC; |
| "Cookie" | a small text file placed on your computer or device by Our Site. Details of the Cookies used by Our Site are set out in Part 14; |
| "Data Protection Legislation" | the UK GDPR and the Data Protection Act 2018, as amended from time to time; |
| "Reports" | the structured construction intelligence reports generated by the PSC Research Tool in response to your User Inputs; |
| "User Inputs" | the URLs, project names, organisation names, free-text descriptions, images, screenshots and other inputs that you submit to the PSC Research Tool to generate Reports. |
Part 2: Information About Us
Our Site is owned and operated by PSC Pipeline Limited, a limited company registered in England under company number 14780084.
Registered address: The Green, Umberleigh, Devon, EX37 9DU.
Main trading address: As above.
ICO data protection registration number: ICO:00013897737
Contact for data protection matters:
Email: privacy@research.pscpipeline.co.uk
Part 3: What Does This Policy Cover?
This Privacy Policy applies to your use of Our Site, including the PSC Research Tool. Our Site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.
PSC Pipeline Limited is the data controller for personal data collected through the PSC Research Tool.
Part 4: What is Personal Data?
Personal data is defined by the Data Protection Legislation as "any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier".
In simpler terms, personal data is any information about you that enables you to be identified. This covers obvious information such as your name and contact details, but also less obvious information such as identification numbers, electronic location data, and other online identifiers.
Part 5: What Are Your Rights?
Under the Data Protection Legislation, you have the following rights, which We will always work to uphold:
- The right to be informed about Our collection and use of your personal data — set out in this Privacy Policy.
- The right to access the personal data We hold about you. Part 13 explains how to do this.
- The right to have inaccurate or incomplete personal data rectified.
- The right to be forgotten — to ask Us to delete personal data We hold about you.
- The right to restrict (i.e. prevent) the processing of your personal data.
- The right to object to Us using your personal data for a particular purpose.
- The right to withdraw consent where We rely on your consent.
- The right to data portability.
- Rights relating to automated decision-making and profiling — see Part 8.
For more information about Our use of your personal data or to exercise any of these rights, please contact Us using the details in Part 15.
If you have any cause for complaint about Our use of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would welcome the opportunity to resolve your concerns directly first — please contact Us using the details in Part 15.
Part 6: What Data Do We Collect and How?
We collect and hold the following categories of personal and non-personal data:
| Category | Examples | How We Collect It |
|---|---|---|
| Identity and contact information | Name, business email address, employer name, job title. | Provided directly by you when you create an Account. |
| Account credentials | Hashed password, authentication tokens, session identifiers. | Generated when you create an Account and when you log in. |
| Subscription and billing information | Subscription plan, Billing Period, status (trial / active / cancelled), VAT details where applicable. Card numbers and full payment details are stored by Our payment processor (Stripe), not by Us. | From you and from Our payment processor at the point of subscription. |
| User Inputs | URLs, project names, organisation names, free-text descriptions, images and screenshots that you submit to the PSC Research Tool to generate Reports. | Provided by you each time you submit a research request. |
| Reports | The structured intelligence reports generated for you by the PSC Research Tool, including any personal data contained in those reports. | Generated by Our systems and AI Sub-processors in response to your User Inputs. |
| Usage and technical data | IP address, approximate location derived from IP, device and browser type, operating system, login timestamps, pages visited, features used, number and timing of Reports generated. | Collected automatically when you use Our Site. |
| Communications | The content of emails and other messages you send Us, and Our responses. | When you contact Us. |
Part 7: How Do We Use Your Personal Data?
Under the Data Protection Legislation, We must always have a lawful basis for using personal data. The following table describes how We use your personal data, and Our lawful bases for doing so:
| What We Do | Data We Use | Lawful Basis |
|---|---|---|
| Creating and managing your Account. | Identity and contact information, Account credentials. | Performance of a contract with you. |
| Providing the PSC Research Tool, including processing your User Inputs and generating Reports. | Identity, Account credentials, User Inputs, Reports. | Performance of a contract with you. |
| Taking and managing payment. | Identity, contact, subscription and billing information. | Performance of a contract with you, and compliance with legal obligations (tax/accounting). |
| Verifying eligibility for the Extended Trial available to PSC Pipeline Subscribers. | Identity and contact information, cross-referenced against PSC Pipeline subscriber records. | Performance of a contract; Our legitimate interest in providing the correct Trial type to the correct customers. |
| Operating Account security measures, including the single concurrent session policy and the detection of suspected credential sharing. | Account credentials, login timestamps, IP address, device and browser information, usage data. | Our legitimate interest in protecting the integrity of Our subscription model and preventing unauthorised access. |
| Enforcing the one-Trial-per-customer rule and preventing trial abuse. | Identity and contact information, payment processor identifiers. | Our legitimate interest in preventing abuse of free trials. |
| Sending service emails (welcome, trial expiry reminders, billing notifications, security alerts, changes to terms). | Identity and contact information. | Performance of a contract with you. |
| Responding to support requests and handling complaints. | Communications, Account information. | Performance of a contract; Our legitimate interest in resolving issues. |
| Improving the Service, including by reviewing aggregated and anonymised usage patterns and anonymised User Inputs. | Aggregated and anonymised usage data, anonymised User Inputs. | Our legitimate interest in improving the Service. |
| Sending marketing emails about the PSC Research Tool, PSC Pipeline and related products. | Identity and contact information. | Your consent. You may withdraw consent at any time using the unsubscribe link in any marketing email. |
| Complying with legal, regulatory and tax obligations. | Subscription and billing information. | Compliance with legal obligations. |
| Developing and improving Our construction intelligence products, including PSC Pipeline, using de-identified project data derived from User Inputs and Reports — such as scheme names, client and contracting organisations, estimated values and project stages — from which all data identifying you and any other individual has been removed. | De-identified project data derived from User Inputs and Reports. No data identifying you or any other individual is used for this purpose. | Our legitimate interest in developing and improving Our construction intelligence products. The de-identification of this data is carried out under the same legitimate interest. |
Part 8: Automated Processing, AI Sub-processors and Anthropic
This Part 8 contains important information about how Your User Inputs are processed by artificial intelligence services. It is provided to help you make an informed decision about what to submit to the PSC Research Tool.
8.1 How Reports are generated. Reports are generated by sending your User Inputs, together with Our research methodology, to one or more third-party AI services known as large language model APIs. The principal AI Sub-processor We use is Anthropic PBC ("Anthropic"), a US-headquartered company that provides the Claude family of large language models.
8.2 Where User Inputs are sent. When you submit a User Input to the PSC Research Tool, that input — together with any text, image or screenshot you have included — is transmitted to Anthropic's API for processing. Anthropic processes the input and returns a response that We use to construct your Report.
8.3 Personal data in User Inputs. Most User Inputs in the construction intelligence context relate to projects, organisations and named individuals in their professional capacity. By submitting a User Input you confirm that you have a lawful basis for sharing the information you submit, including any personal data of third parties contained within it.
8.4 Anthropic's role. Anthropic acts as a data processor in respect of your User Inputs. Anthropic is contractually committed not to use API inputs or outputs to train its models by default. We have entered into a Data Processing Agreement with Anthropic that governs Anthropic's processing of personal data on Our behalf.
8.5 International transfers. Anthropic's processing of your User Inputs may take place in the United States and other countries outside the UK. Where personal data is transferred outside the UK to Anthropic, the transfer is protected by the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses (or equivalent safeguards as required from time to time).
8.6 Other sub-processors. We use the following additional sub-processors to operate the PSC Research Tool:
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic PBC | AI processing of User Inputs to generate Reports. | United States. |
| Vercel Inc. | Hosting of Our Site and the PSC Research Tool application. | United States and other regions. |
| Supabase Inc. | Database, authentication and file storage. | United States and other regions. |
| Stripe Payments Europe Ltd / Stripe Inc. | Payment processing and subscription management. Stripe is the controller of payment card data. | Republic of Ireland (EU) and United States. |
| Resend | Sending transactional emails (welcome, trial reminders, security alerts). | United States and other regions. |
| Vercel Analytics | Aggregated, privacy-respecting usage analytics. | United States and other regions. |
8.7 Automated decision-making. Reports are generated automatically using AI but are intended for human review and use. We do not make any decision about you that produces legal effects or similarly significant effects on you based solely on automated processing.
8.8 Sensitive content. Please do not submit special category data (such as data revealing health, racial or ethnic origin, religious beliefs, or political opinions), legally privileged material, or information you are not authorised to share. The PSC Research Tool is designed for construction project intelligence and is not intended to process sensitive personal data.
Part 9: How Long Will We Keep Your Personal Data?
We will not keep your personal data for any longer than is necessary in light of the reasons for which it was first collected. Retention periods are set out in the table below.
| Type of Data | Retention Period |
|---|---|
| Account information (identity, contact, credentials). | For the duration of your Account, plus 30 days after your Subscription ends or your Trial expires (the read-only period). Deleted at the end of the read-only period. |
| Reports generated by the PSC Research Tool. | For the duration of your Account, plus the 30-day read-only period. Permanently deleted at the end of the read-only period. |
| User Inputs (your submissions). | Stored alongside the corresponding Report and deleted at the same time. Anthropic retains API inputs for a limited period for trust and safety purposes, in accordance with its own retention policies. |
| Login logs and security event records (IP address, timestamps, device and browser information). | 12 months from the date of the event, then deleted or anonymised. |
| Billing and tax records. | Six years from the end of the relevant tax year, in accordance with HMRC requirements. |
| Marketing consents and preferences. | Until you withdraw consent or your Account is deleted, whichever is sooner. |
| Communications and support correspondence. | Two years from the date of the last communication, then deleted. |
| De-identified project data (such as scheme names, client organisations, estimated values and project stages) derived from User Inputs and Reports, from which all data identifying you and any other individual has been removed. | Retained on an ongoing basis. Because this data does not identify you or any other individual, it is not personal data and is not deleted when your Reports and User Inputs are deleted. It is used only as described in Part 7. |
Part 10: How and Where Do We Store or Transfer Your Personal Data?
We use a combination of UK, European Economic Area (EEA) and other international service providers to operate the PSC Research Tool. Some of your personal data is therefore transferred outside the UK and the EEA, in particular to the United States.
Where personal data is transferred to a country outside the UK that is not the subject of a UK adequacy decision, We rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or other appropriate safeguards as required by law from time to time, to ensure that your personal data is treated to a comparable standard of protection.
The security of your personal data is essential to Us. To protect your data, We take a number of important measures, including:
- Limiting access to personal data to those personnel and contractors with a legitimate need to know.
- Encrypting data in transit and at rest.
- Hashing passwords using industry-standard algorithms.
- Maintaining procedures for dealing with personal data breaches, including notification to the ICO and affected users where legally required.
- Reviewing access and security measures on a regular basis.
Part 11: Do We Share Your Personal Data?
We do not sell your personal data and We do not share it with third parties for their own marketing purposes.
We share your personal data only with the sub-processors listed in Part 8.6, and only for the purposes set out in this Privacy Policy. Each sub-processor is bound by contract to process personal data only on Our instructions and to maintain appropriate security and confidentiality.
In limited circumstances, We may be legally required to share certain personal data, for example if We are involved in legal proceedings or are complying with legal obligations, a court order, or instructions of a government authority.
If We sell, transfer, or merge parts of Our business or assets, your personal data may be transferred to a third party. Any new owner of Our business may continue to use your personal data in the same ways set out in this Privacy Policy. We will notify you in advance of any such transfer.
Part 12: How Can You Control Your Personal Data?
In addition to the rights set out in Part 5, you have a number of practical controls over your personal data:
- You can update your name, email address and other Account details at any time from your Account settings.
- You can cancel your Subscription, request earlier deletion of your Reports, or close your Account at any time.
- You can opt out of marketing emails at any time using the unsubscribe link in any marketing email.
- You can manage Cookie preferences using the cookie banner on Our Site, or via your browser settings.
You may use Our Site without providing certain personal data, but you cannot use the PSC Research Tool without an Account, which requires Us to process at least your identity, contact and Account information.
Part 13: How Can You Access Your Personal Data?
If you want to know what personal data We have about you, you can ask Us for details and for a copy of it. This is known as a "subject access request".
All subject access requests should be made in writing to the email address shown in Part 15.
There is not normally any charge for a subject access request. If your request is "manifestly unfounded or excessive" (for example, if you make repetitive requests) a reasonable fee may be charged.
We will respond to your subject access request within one month of receiving it. In some cases, particularly if your request is more complex, more time may be required up to a maximum of three months from the date We receive your request. You will be kept informed of Our progress.
Part 14: How Do We Use Cookies?
Our Site places certain Cookies on your computer or device. Some are first-party Cookies set by Us; others are third-party Cookies set by services We rely upon.
We use Cookies to keep you logged in, to operate the single concurrent session policy described in Our Terms of Use, to detect security issues, to process payments via Stripe, and (where applicable) to gather aggregated, privacy-respecting analytics.
All Cookies used by and on Our Site are used in accordance with current cookie law. Before non-essential Cookies are placed on your computer or device, you will be shown a cookie banner asking for your consent. Strictly necessary Cookies (those essential to log you in and keep the Service secure) are set without consent, in accordance with cookie law.
A full list of the Cookies used on Our Site is set out in Our Cookie Policy at https://research.pscpipeline.co.uk/cookies (https://research.pscpipeline.co.uk/cookies)
You can choose to enable or disable Cookies in your browser at any time. By default, most browsers accept Cookies. Please consult the help menu in your browser for guidance. Disabling strictly necessary Cookies will prevent you from logging in to the PSC Research Tool.
Part 15: How Do You Contact Us?
To contact Us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:
Email: privacy@research.pscpipeline.co.uk
Postal address: The Green, Umberleigh, Devon, EX37 9DU
Part 16: Changes to this Privacy Policy
We may review and update this Privacy Policy from time to time to ensure continued compliance with the law and best practice, or to reflect changes in the way We operate the PSC Research Tool.
Any changes will be posted on Our Site. Where the changes are material, We will notify Account holders by email at least 14 days before the changes take effect. You will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations.
This Privacy Policy is based in part on a document template from www.simply-docs.co.uk and has been substantially adapted for the PSC Research Tool, including disclosures relating to AI processing by Anthropic PBC and other sub-processors.