Legal

Privacy Policy

Last updated: October 4, 2026

Cladfab Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data collected from trade customers, contractors, and users of Site Measure and the CladFab phone app.

1. Data We Collect

When you open a CladFab account, submit measurements, or request quotes, we collect personal data including:

  • Contact details: Name, business email address, phone number.
  • Company details: Company name, trade type, CRO registration (if applicable).
  • Project data: Dimensional measurements, site photographs, custom layouts, and drawing attachments.
  • Sign-up security: when you open an account we record the internet (IP) address you signed up from and its approximate location and network (looked up with ipinfo.io and ipapi.is), and check the company number you give against the public company register, to help prevent fraud. This is kept with your account record and deleted with it.

2. Legal Basis and Purpose of Processing

We process your personal data under GDPR compliance on the following bases:

  • Performance of a Contract: To prepare fabrication quotes, cut and form fittings to your measurements, and process orders.
  • Legitimate Interests: To plan and cut efficiently, manage customer accounts, and ensure workshop security.

3. Data Retention and Storage (EU Servers)

All account data, project databases, and uploaded measurements are stored securely on managed cloud database infrastructure located within the European Union (Ireland region). We retain your data for as long as your account remains active or as required by Irish tax and corporate law.

4. Your Rights Under GDPR

As a data subject residing in the European Union, you have the following rights:

  • The right to access the personal data we hold about you.
  • The right to request rectification of inaccurate personal data.
  • The right to request erasure of your data ("right to be forgotten").
  • The right to object to or restrict processing.

To exercise any of these rights, please contact our data officer at sales@cladfab-ltd.com.

5. Data Sharing and White-Label Commitment

We operate under a strict trade-only policy. We do not sell, rent, or lease your project data, client details, or contact information to any third parties. We will never contact your customers or installers, and all quotes and packages remain strictly white-label.

Sub-processors

CladFab uses the following third-party sub-processors to operate the service:

  • Supabase Inc. (supabase.com) — database and authentication. EU (Ireland) region.
  • Stripe Inc. (stripe.com) — payment processing.
  • Sendinblue / Brevo SAS (brevo.com) — transactional email.
  • Netlify Inc. (netlify.com) — hosting and serverless functions.
  • Google LLC (cloud.google.com) — AI assistant (Gemini) used in CladBot.
  • Anthropic PBC (anthropic.com) — AI assistant (Claude) used as CladBot fallback.

All sub-processors are bound by data processing agreements and operate in accordance with GDPR. Data is processed only as necessary to provide the CladFab service.