privacy policy | construction ninja

Construction Ninja Ltd

Effective Date: 19 Sep 2025
Last Updated: 19 Sep 2025

1. Introduction

1.1 About This Policy

Construction Ninja Ltd ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our WhatsApp chatbot services, AI agents, and related digital services ("Services").

1.2 Who We Are

We are Construction Ninja Ltd, a company registered in England and Wales. Our registered office is at 47 Venture Court, Canal Road, Gravesend, Kent, UK. You can contact us at hello@construction.ninja or visit our website at www.construction.ninja.

1.3 Legal Basis

This policy applies where we act as a data controller under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.4 Scope

This policy covers all personal data we process through:

WhatsApp messaging interactions
Our AI chatbot and agent services
Website usage and account management
Subscription and payment processing
Customer support and communications

2. Information We Collect

2.1 WhatsApp Messaging Data

When you interact with our WhatsApp chatbot, we collect:

Your WhatsApp phone number
Message content and conversation history
Timestamps of interactions
Message delivery and read status
Profile information (name, profile picture if shared)

2.2 Subscription and Payment Information

For our subscription services, we collect:

Billing name and contact details
Payment card information (processed securely by Stripe)
Subscription preferences and history
Transaction records and payment status

2.3 Usage and Technical Data

We automatically collect:

IP address and device information
Browser type and operating system
Service usage patterns and preferences
Performance and error logs
Analytics data on service interaction

2.4 Communication and Support Data

When you contact us, we may collect:

Email address and contact information
Support request details and history
Feedback and survey responses
Any other information you choose to share

2.5 AI Training and Improvement Data

To enhance our AI services, we process:

Anonymized conversation patterns
Common query types and responses
Service performance metrics
User interaction preferences

3. How We Use Your Information

3.1 Service Provision

We use your data to:

Deliver WhatsApp chatbot and AI agent services
Process and respond to your queries
Maintain conversation context and history
Provide personalized assistance and recommendations

3.2 AI System Enhancement

Your interactions help us:

Train and improve our AI models
Develop better response accuracy
Create more relevant content and features
Enhance natural language understanding

3.3 Subscription Management

We process your data to:

Manage your monthly subscription
Process payments through Stripe
Handle subscription changes and cancellations
Send billing notifications and updates

3.4 Communication and Support

We use your information to:

Respond to customer support requests
Send service updates and important notices
Provide technical assistance
Gather feedback for service improvement

3.5 Legal and Business Operations

We may process your data for:

Compliance with legal obligations
Fraud prevention and security
Business administration and record-keeping
Legal claims and dispute resolution

4. Legal Basis for Processing

We process your personal data based on:

4.1 Contract Performance

Delivering subscribed services
Processing payments and managing accounts
Providing customer support

4.2 Legitimate Interests

Improving our AI services and technology
Fraud prevention and security
Business administration and development
Marketing and communication (with opt-out options)

4.3 Consent

Non-essential cookies and analytics
Marketing communications (where required)
Specific data processing you've agreed to

4.4 Legal Compliance

Responding to legal requests
Regulatory compliance requirements
Financial record-keeping obligations

5. Data Sharing and Third Parties

5.1 Payment Processing

We share necessary payment information with Stripe (our payment processor) to process subscription payments. Stripe's privacy policy governs their data handling: https://stripe.com/privacy

5.2 WhatsApp Platform

Your WhatsApp interactions are subject to WhatsApp's privacy policy and terms of service. We receive message data through WhatsApp's Business API.

5.3 AI and Cloud Services

We may use third-party AI and cloud services to:

Process and analyze messages
Store conversation data securely
Enhance our AI capabilities
Provide service infrastructure

5.4 Legal and Professional Services

We may share data with:

Legal advisors and accountants
Regulatory authorities (when required)
Insurance providers
Professional service providers under confidentiality agreements

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.

6. Data Security and Protection

6.1 Security Measures

We implement appropriate technical and organisational measures including:

Encryption of data in transit and at rest
Access controls and authentication
Regular security assessments
Staff training on data protection
Secure cloud infrastructure

6.2 Data Breach Response

In the event of a data breach, we will:

Contain and assess the incident
Notify relevant authorities within 72 hours
Inform affected individuals when required
Take steps to prevent future breaches

7. Data Retention

7.1 Retention Periods

We retain personal data as follows:

WhatsApp conversation data: Up to 2 years from last interaction
Subscription and payment data: 7 years for financial record-keeping
Support communications: 3 years from resolution
Marketing data: Until consent is withdrawn
Analytics data: 2 years in aggregated form

7.2 Deletion Process

When retention periods expire, we securely delete or anonymise personal data unless legal obligations require longer retention.

8. Your Rights

Under UK data protection law, you have the right to:

8.1 Access and Portability

Request copies of your personal data
Receive data in a portable format
Understand how your data is processed

8.2 Correction and Completion

Correct inaccurate personal data
Complete incomplete information
Update your preferences and details

8.3 Deletion and Restriction

Request deletion of your personal data
Restrict processing in certain circumstances
Object to processing based on legitimate interests

8.4 Withdrawal and Objection

Withdraw consent for specific processing
Opt out of marketing communications
Object to automated decision-making

8.5 Complaints

You can lodge complaints with the Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/

9. International Transfers

9.1 Data Location

Your data may be processed in:

United Kingdom (primary location)
European Economic Area
Other countries with adequate data protection

9.2 Safeguards

When transferring data internationally, we ensure appropriate safeguards through:

Adequacy decisions by UK authorities
Standard contractual clauses
Certification schemes and codes of conduct

10. Cookies and Tracking

10.1 Website Cookies

Our website uses cookies for:

Essential website functionality
Analytics and performance monitoring
User preferences and settings
Security and fraud prevention

10.2 Cookie Management

You can manage cookies through your browser settings. Disabling cookies may affect website functionality.

10.3 Analytics

We use analytics services to understand website usage and improve our services. Data is typically anonymized and aggregated.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

12. Marketing Communications

12.1 Subscription Communications

We may send service-related communications including:

Subscription confirmations and billing notices
Service updates and maintenance notifications
Important policy changes
Security alerts

12.2 Marketing Opt-Out

You can opt out of marketing communications by:

Following unsubscribe links in emails
Contacting us at hello@construction.ninja

13. Policy Updates

13.1 Changes to This Policy

We may update this privacy policy to reflect changes in:

Our services and business practices
Legal and regulatory requirements
Technology and security improvements

13.2 Notification of Changes

We will notify you of significant changes through:

Email notifications to subscribers
Website announcements
WhatsApp messages (for major changes)

13.3 Review and Acceptance

We encourage you to review this policy periodically. Continued use of our services constitutes acceptance of any updates.

14. Contact Information

14.1 Data Protection Inquiries

For privacy-related questions or to exercise your rights, contact us:

Construction Ninja Ltd
Email: hello@construction.ninja
Website: www.construction.ninja
Address: 47 Venture Court, Canal Road, Gravesend, Kent, UK

14.2 Data Protection Officer

Construction Ninja Ltd serves as its own data protection contact for all privacy matters.

14.3 Regulatory Authority

UK Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113

15. Definitions

15.1 Personal Data

Any information relating to an identified or identifiable individual.

15.2 Processing

Any operation performed on personal data, including collection, use, storage, and deletion.

15.3 Data Controller

The entity that determines the purposes and means of personal data processing (Construction Ninja Ltd).

15.4 Data Processor

Third parties that process personal data on our behalf under our instructions.

This privacy policy is effective as of the date listed above and applies to all data processing activities by Construction Ninja Ltd.