Effective 15 September 2026
PRIVACY NOTICE
This draft notice explains information used when you create an account or work on a governed design and construction project in Thread. The operating company’s legal identity and privacy contact must be inserted before launch.
INFORMATION WE USE
Account and client identity; company, project and discipline membership; professional registration body, number, jurisdiction, competence scope, verification evidence and expiry; design files, structured design objects and revision history; coordination issues and discussions; photographs, location and installed-product evidence; approval decisions, limitations, audit events and cryptographic hashes; and essential security logs.
ROLES AND LAWFUL BASES
Project customers generally decide why project information is processed and Thread operates the service on their instructions. Thread may separately control account security, professional verification and service administration information. Expected lawful bases include contract, legitimate interests, legal obligation and, where genuinely optional, consent. These roles and bases require confirmation in the customer agreement and final notice.
PROFESSIONAL VERIFICATION AND CONFLICT DETECTION
Credential evidence is reviewed to determine whether an account may satisfy a discipline approval gate. Thread may also flag geometric overlaps as coordination candidates. Neither process is an automated safety, compliance or competence decision; authorised people remain responsible for professional review and the final decision.
WHY WE USE IT
We use this information to provide and secure the service, maintain attributable project records, support clients, meet contractual obligations and comply with legal duties. We do not sell personal information.
WHO CAN SEE IT
Access is limited by company, project and assigned role. Authorised client users can see records shared with their project. Service providers may process information only to operate the service under contract.
RETENTION AND YOUR RIGHTS
Account, credential, design, approval, audit and site-evidence retention periods must be defined in the customer retention schedule. UK rights may include access, correction, restriction, objection, portability and erasure where applicable. Issued and authorised records may need to remain intact for legal, safety or contractual reasons; later corrections are recorded without silently rewriting history.
RECIPIENTS, TRANSFERS AND SECURITY
Access is role- and project-scoped. Relevant professionals and client users may see identity, design and decision information needed for their project. Contracted hosting, storage, communications and support providers may process data. The final notice must name processor categories, transfer safeguards and hosting locations. Thread uses access controls and audit history, but no online service can promise absolute security.
CHILDREN
Thread is a professional service and is not intended for children. Project administrators must not invite users who are not legally able to enter the relevant working arrangements.
REQUESTS AND COMPLAINTS
Send a privacy request using the Thread contact details in your organisation’s order form or contract. You may also complain to the UK Information Commissioner’s Office. We will verify identity before acting on a request.