Corporate Privacy Policy

This Privacy Policy describes how Bite Engineering Ltd (“we”, “us” or “our”) collects, uses, stores, shares and protects personal data in connection with our products, services and website. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Bite Engineering Ltd builds AI agents that automate manual workflows for construction consultants and engineers, replacing repetitive human hours with intelligent automation. Our products and services are primarily aimed at businesses and professionals operating in the built environment sector.

Our Details

Data Controller: Bite Engineering Ltd
Registered Address: 27 Corsham Street, London, N1 6DR
Email: founders@bite.engineering

Scope

This policy applies to all individuals whose personal data we process, including:

• Customers and users of our AI platform and services
• Business contacts and prospective clients 
• Employees, contractors and job applicants
• Visitors to our website at bite.engineering

Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated to you by email or by a prominent notice on our website. The date of the most recent revision appears at the top of this document.

 

Personal data means any information that can identify a living individual. We may collect, use, store and transfer the following categories of personal data:

Identity Data

First name, last name, job title, professional credentials, and company or organisation name.

Contact Data

Business email address, telephone number, and mailing address.

Transaction Data

Details about payments to and from us, as well as subscription and contract information relating to services you have purchased.

Technical Data

Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology identifiers on the devices used to access our platform and website.

Usage Data

Information about how you use our platform, website and services, including pages visited, features used, and actions taken within the application.

Profile Data

Your username, password, preferences, feedback, survey responses and any other information you provide when creating or managing your account.

Communications Data

Your preferences for receiving marketing communications from us, and your communication history with our team.

Professional / Project Data

Construction project information, engineering documents, drawings, specifications or other professional content that you upload to or process via our AI platform. Where such content contains personal data about third parties (for example, named engineers or site contacts), you are responsible for ensuring you have the appropriate legal basis to share that data with us.

Aggregated Data

We may collect, use and share aggregated or anonymised data for any purpose. Aggregated data does not constitute personal data as it cannot be used to identify you.

Special Categories of Data

We do not intentionally collect any special categories of personal data (e.g. data revealing racial or ethnic origin, political opinions, religious beliefs, health data or biometric data). Please do not submit such data to us.

 

Direct Interactions

You may give us personal data by filling in forms, registering for an account, subscribing to our services, requesting information or marketing, or by corresponding with us by telephone, email or otherwise. This includes data provided when you:

• Create or manage an account on our platform
• Use our AI agent features and upload project materials
• Complete contact forms or request a demo
• Subscribe to our newsletter or marketing communications
• Report an issue or provide feedback

Automated Technologies

As you interact with our website and platform, we may automatically collect Technical Data and Usage Data using cookies, server logs and similar technologies. Please see our Cookie Policy for further details.

Third Parties and Public Sources

We may receive personal data from the following third-party sources: 

• Microsoft Azure: our cloud infrastructure provider, which may capture technical and usage data as part of operating our platform 
• Analytics providers such as those integrated into our platform or website
• Publicly available professional sources such as LinkedIn or Companies House, where we conduct due diligence

We will only use your personal data where we have a lawful basis to do so. Most commonly we will use your personal data in the following circumstances:

• Performance of a contract: where processing is necessary to provide you with the services you have subscribed to
• Legitimate interests: where processing is necessary for our legitimate business interests and your interests and fundamental rights do not override those interests
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation
• Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications

Purposes of Processing

We use your personal data for the following purposes: 

• To register you as a new customer and manage your account
• To provide and improve our AI platform and services 
• To process payments and manage billing 
• To send service notifications, updates and support communications
• To send you marketing communications where you have opted in (you may opt out at any time)
• To administer and protect our business, website and platform (including troubleshooting, data analysis and security)
• To comply with legal obligations and resolve disputes
• To conduct research and analysis to improve our products and services

Marketing

We may use your Identity, Contact and Usage data to form a view of what products or services may be relevant to you. You will receive marketing communications from us only if you have requested information from us or purchased services from us and you have not opted out of receiving marketing. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at founders@bite.engineering.

We may share your personal data with the parties set out below for the purposes described in this policy.

Service Providers (Data Processors)

We use trusted third-party service providers who process data on our behalf under written data processing agreements. These include:

• Microsoft Azure: cloud infrastructure and hosting services. Data may be processed in the UK and/or European Economic Area (EEA) subject to appropriate safeguards
• Payment processors (where applicable) for billing and subscription management
• Analytics and monitoring providers to help us understand usage and improve our platform
• Customer relationship management (CRM) tools used to manage client communications

Legal and Regulatory Disclosures

We may disclose your personal data to regulatory bodies, law enforcement agencies, or courts if required to do so by law, or in order to enforce our legal rights, or to protect our property or the rights of our clients.

Business Transfers

In the event that we sell, transfer or merge parts of our business or assets, your personal data may be transferred to a third party as part of that transaction. We will take reasonable steps to ensure that any such third party adheres to appropriate data protection standards.

Some of our service providers (including Microsoft Azure) may transfer or store your data outside the UK or the EEA. Where this occurs, we ensure that appropriate safeguards are in place to protect your data, including:

• Transfers subject to a UK adequacy decision by the Secretary of State
• Use of the UK International Data Transfer Agreement (IDTA) or equivalent approved standard contractual clauses
• Where the processor has Binding Corporate Rules (BCRs) approved by the ICO or a competent authority Please contact us at founders@bite.engineering if you would like further information about the specific safeguards we apply to international transfers of your personal data.

We have implemented appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:

• Encryption of data in transit and at rest via our cloud infrastructure (Microsoft Azure)
• Access controls and role-based permissions for our systems and data
• Regular security reviews and testing of our platform
• Staff training on data protection and information security obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, and will notify you directly where required.

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes by other means, together with applicable legal requirements.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Under the UK GDPR, you have a number of rights in relation to your personal data. You can exercise these rights free of charge at any time by contacting us at founders@bite.engineering. 

Right of Access

You have the right to request a copy of the personal data we hold about you (commonly known as a “data subject access request”). This allows you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Right to Rectification

You have the right to request that we correct any incomplete or inaccurate personal data we hold about you.

Right to Erasure

You have the right to ask us to delete or remove personal data where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully, or where we are required to erase your personal data to comply with local law.

Right to Object

You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and you believe the processing impacts your fundamental rights and freedoms. You also have the absolute right to object where we are processing your personal data for direct marketing purposes.

Right to Restrict

Processing You have the right to ask us to suspend the processing of your personal data in certain scenarios; for example, if you want us to establish the data’s accuracy or if you have objected to our use of your data.

Right to Data

Portability You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.

Right to Withdraw Consent

Where we are processing your personal data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.

Right to Lodge a Complaint

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO). You can contact the ICO at www.ico.org.uk or by telephone on 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.

Time Limit to Respond

We aim to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Lawful Basis for Processing

• Legitimate Interest: processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests
• Performance of Contract: processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into such a contract • Comply with a Legal Obligation: processing is necessary for compliance with a legal obligation to which we are subject
• Consent: you have given clear, specific, informed and unambiguous consent to the processing of your personal data for a specified purpose Third Parties
• Internal Third Parties: other companies within the Bite Engineering Ltd group, acting as joint controllers or processors
• External Third Parties: service providers acting as processors based inside the UK or EEA who provide IT, cloud infrastructure (including Microsoft Azure), analytics, and other services; and any professional advisers including lawyers, bankers and auditors who are bound by duties of confidentiality

Your Legal Rights: Expanded Definitions

• Right to Access: the right to receive a copy of your personal data and supplementary information confirming how we use it
• Right to Rectification: the right to have inaccurate personal data corrected or incomplete data completed
• Right to Erasure: also known as the ‘right to be forgotten’. The right to have your personal data deleted or removed in certain circumstances
• Right to Object: the right to object to the processing of your personal data in certain circumstances, including for direct marketing
• Right to Restrict Processing: the right to request the suppression of processing of your personal data
• Right to Data Portability: the right to request that we transfer your personal data to you or to a third party in a machine-readable format
• Right to Withdraw Consent: the right to withdraw consent at any time where we are relying on consent to process your personal data

For all data protection enquiries, to exercise any of your rights, or if you have any questions about this Privacy Policy, please contact us at: founders@bite.engineering
Bite Engineering Ltd, 27 Corsham Street, London, N1 6DR