Last updated: 16th December 2025

This Privacy Policy explains how Aperture Works Ltd (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you use our websites, software platforms, and mobile applications, including but not limited to:

• Take-Off PDF
• HUB (CRM)
• HUB Delivery App
• HUB Install App

Any future web, mobile, or standalone applications operated by Aperture Works Ltd
This policy applies globally and is intended to meet the requirements of the Apple App Store, Google Play Store, and applicable data protection laws.

1. Company details
Aperture Works Ltd
Enterprise House, The Courtyard, Old Court House Road
Bromborough, Wirral, England, CH62 4UE
Email: info@aperture-works.com

2. Our role as data controller
For the purposes of the UK General Data Protection Regulation, EU GDPR where applicable, and other relevant data protection laws, Aperture Works Ltd is the data controller for personal data collected through our services.

This means we determine how and why personal data is processed.

3. Services covered by this policy
This policy covers:

• • Web based platforms operated by Aperture Works Ltd
  • Companion mobile applications that rely on an associated web account
  • Mobile applications that may operate as standalone tools
  • Productivity and workflow applications used within the construction and related industries
  • Some apps may be used without an account on other Aperture Works services.

• Others may require an associated account to function correctly.

4. Information we collect:
Account information

• Name
• Email address
• Company name
• Job title, if provided
• Encrypted password
• Two-factor authentication details

Billing information

• Subscription and payment status
• Payments are processed by Stripe
• We do not store full card details

Usage and technical data

• App and website usage
• Error and performance data
• IP address
• Device type
• Operating system
• Browser type
• Login timestamps

Uploaded content

• Files, documents, drawings, PDFs, and images uploaded by users
• Content submitted through our CRM or companion apps

Marketing preferences

• Opt in or opt out choices for communications

Analytics data

• Anonymised or aggregated usage data from analytics tools, which may include
• Google Analytics or Microsoft Clarity

5. Device permissions and mobile app data use
Our mobile applications may request access to certain device features only when required for functionality:

Camera
Used to capture photos or documents at the user’s request
Microphone
Used only during active features that require audio input
File access
Limited to files explicitly selected by the user
Location data
Not currently collected
May be introduced in future features with clear user consent and platform required permission prompts

We do not access contacts, background media, or other device data without explicit user interaction.

6. How we use your information
We use personal data to:

• Create and manage user accounts
• Provide, operate, and maintain our services
• Enable secure login using two factor authentication
• Process payments via Stripe
• Communicate service related messages and support responses
• Send marketing communications where consent has been given
• Improve performance, reliability, and usability
• Maintain security, prevent misuse, and meet legal obligations

We only process personal data where we have a lawful basis to do so.

7. Uploaded content and responsibility
Users are responsible for the content they upload, including any personal, confidential, or sensitive information belonging to themselves or third parties.

We provide secure hosting and access controls, but users must ensure they have the right to upload and process such data.

8. Sharing your data
We do not sell or rent personal data.

Data may be shared only with trusted processors where necessary, including:

• Stripe for payment processing
• Secure hosting providers based in the UK
• Professional advisers for legal or regulatory reasons
• Authorities where required by law
• We do not share uploaded files or personal data with third parties for advertising or profiling.

9. International data transfers
Personal data is hosted in the United Kingdom.

We do not currently transfer personal data outside the UK.

10. Data security
We use appropriate technical and organisational measures to protect personal data, including:

• Encryption
• Access controls
• Two-factor authentication
• Secure infrastructure
• No system is completely secure. Users should keep login credentials confidential and use strong passwords.

11. Data retention
We retain personal data only for as long as necessary.

• When an account is closed, personal data is deleted or anonymised within a reasonable period
• Uploaded files are deleted when removed by the user or when an account is closed
• Name and email address may be retained after account deletion for operational, legal, audit, or fraud prevention purposes

12. Account and data deletion

• Users can delete their account via their web login
• Standalone app users will be able to delete accounts directly within the app
• Individual uploaded files can be deleted by the user
• Deletion is permanent except for limited retained data described above

13. Analytics and tracking
Analytics tools are used only to understand usage and improve product performance.

• No advertising tracking
• No cross app or cross website tracking outside our services
• No sale of analytics data

Where required, platform specific transparency prompts will be shown.

14. Children and age restriction
Our services are intended for users aged 18 and over.

We do not knowingly collect personal data from children.

15. Your rights
Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Withdraw marketing consent
• Request data portability
• Requests can be made to info@aperture-works.com. Identity verification may be required.

UK users may also contact the Information Commissioner’s Office at www.ico.org.uk.

16. Marketing communications
Marketing emails are sent only where consent has been provided.

You can unsubscribe at any time using email links or by contacting us directly.

17. Changes to this policy
We may update this policy from time to time.

Material changes will be communicated via email or within the platform where appropriate.