Privacy Policy

Brazhelp Solutions (trading as "Construforce") ("Construforce", "we", "us", "our") is the data controller responsible for your personal data. Construforce is a product of Brazhelp Solutions, operating in the United Kingdom. We are registered with the Information Commissioner's Office (ICO). If you have any questions or concerns about how we handle your personal data, please contact our Data Protection contact at [email protected].

We collect and process the following categories of personal data depending on how you use the Platform:

We process your personal data on the following legal bases under UK GDPR Article 6:

• Contract performance — to provide the Platform services you have subscribed to, process payments, and manage your account.
• Legitimate interests — to improve the Platform, prevent fraud, ensure security, and send service-related communications. We have assessed that these interests are not overridden by your rights.
• Legal obligation — to comply with applicable UK law, including tax, anti-money laundering, and employment law requirements.
• Consent — for push notifications and any optional marketing communications. You may withdraw consent at any time.

Where we process National Insurance numbers, we rely on the legal basis of contract performance and compliance with legal obligations, as this data may be required for employment verification purposes.

We use your personal data to:

• Create and manage your account and subscription.
• Enable Workers to be discovered by Companies based on trade, region, and availability.
• Facilitate job offers, applications, and direct messaging between Workers and Companies.
• Process payments and manage billing through Stripe.
• Send transactional notifications (new offers, messages, document access requests).
• Verify CSCS cards and professional credentials where submitted.
• Detect and prevent fraud, abuse, and unauthorised access.
• Comply with our legal and regulatory obligations.
• Improve and develop the Platform using aggregated, anonymised analytics.

National Insurance numbers are encrypted using AES-256 encryption at rest and are never transmitted in plain text. CSCS card images are stored in a secure, access-controlled cloud storage environment. Neither document type is accessible to Companies unless: (i) the Company has sent a direct job offer; (ii) the Worker has accepted that offer; and (iii) the Worker has explicitly granted document access. Workers may revoke document access at any time.

We do not sell your personal data. We share your data only in the following circumstances:

• With Companies — Worker profile data (name, trade, region, availability, certifications) is visible to Companies with an active subscription. Sensitive documents are only shared with explicit Worker consent as described above.
• With Workers — Company profile information (name, type, region) is visible to Workers when they receive offers or messages.
• Service providers — We use Stripe (payment processing), Amazon Web Services (cloud storage), and Manus (platform infrastructure). These providers process data on our behalf under data processing agreements.
• Legal requirements — We may disclose data to law enforcement or regulatory authorities where required by law or to protect the rights, property, or safety of Construforce, our users, or the public.

Some of our service providers (including Stripe and AWS) may process data outside the United Kingdom. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or reliance on the UK's adequacy decisions, in accordance with UK GDPR Chapter V.

We retain your personal data for as long as your account is active or as necessary to provide our services. Following account deletion or subscription cancellation, we retain data for a period of up to 7 years to comply with our legal and tax obligations, after which it is securely deleted or anonymised. Specific retention periods are:

Under UK GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

The Platform uses essential session cookies to maintain your authenticated session. We do not use third-party advertising cookies or behavioural tracking cookies. Analytics, where used, are aggregated and anonymised. You may disable cookies in your browser settings, but this may affect the functionality of the Platform.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include AES-256 encryption for sensitive data at rest, TLS encryption for data in transit, access controls limiting data access to authorised personnel, and regular security reviews. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by UK GDPR.

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by displaying a prominent notice on the Platform. The effective date at the top of this page indicates when the policy was last updated.

For any privacy-related queries, data subject access requests, or to exercise your rights, please contact us at: