PEAC Privacy Policy
Version [1.0] · Effective [Effective date]
1. Who we are
PEAC Studio Ltd (PEAC Studio, we, us) provides PEAC, an online pipeline, forecasting and relationship management service for construction and design-team professionals. We are registered in Scotland, company number SC905679, registered office 5 South Charlotte Street, Edinburgh, EH2 4AN. We are registered with the Information Commissioner's Office, registration number ZC283174.
For any privacy question or to exercise your rights, contact privacy@peac.studio.
2. What this policy covers
This policy explains how we handle personal data when we decide why and how it is used (as a controller), namely when you:
- visit our website peac.studio;
- sign up for, or are invited to, a PEAC account;
- are a billing contact for a customer;
- contact us for support or send us feedback; or
- receive marketing or service emails from us.
Information your firm stores in PEAC. Firms that use PEAC record information about their own clients and contacts. For that information the firm is the controller and we act only on its instructions as a processor, under our Data Processing Agreement. If you think a firm holds information about you in PEAC, please contact that firm directly. If you contact us, we will pass your request to them.
3. What we collect and why
| Who | Personal data | Purpose | Lawful basis |
|---|---|---|---|
| Account users | Name, business email, firm name, role, password (stored as a one-way hash only), login times, record of accepting our Terms | Creating and running your account, security, preventing misuse, proving acceptance of Terms | Contract (with your firm) and legitimate interests in running a secure service |
| Account users | Service emails — invitations, password resets, trial and billing notices, important service changes | Operating the Service | Contract / legitimate interests |
| Billing contacts | Name, email, billing address, VAT number, purchase order numbers, payment history. Card details are collected and held by Stripe, never by us | Billing, invoicing, accounting, tax | Contract and legal obligation (tax and accounting records) |
| People who contact us | Name, email, the content of your message and any attachments you choose to send | Responding and providing support, improving the Service | Legitimate interests |
| Website visitors | Pages visited, device and browser information, approximate location from IP address, and — only if you consent — advertising and analytics cookie data | Running and securing the website; measuring the effectiveness of our advertising | Legitimate interests (essential operation); consent (non-essential cookies) |
| Prospects and users | Name and business email | Occasional product news and offers by email | Legitimate interests, or consent where required. You can unsubscribe at any time using the link in every email |
We do not use any of this information to make automated decisions with legal or similarly significant effects, and we do not sell it.
4. Advertising
We advertise on Meta platforms (Facebook and Instagram). If you accept marketing cookies on our website, the Meta Pixel lets us see whether visitors who clicked our ads went on to start a trial, and to show our ads to similar audiences. Meta acts as a joint controller with us for the collection of this data and as an independent controller for its own use of it under Meta's own privacy policy. If you do not accept marketing cookies, the Pixel does not run. See our Cookie Policy for details.
We do not upload the contacts your firm stores in PEAC to any advertising platform.
5. Who we share it with
We share personal data only with the service providers that help us run PEAC, under contracts that require them to protect it:
- Abacus (our managed cloud hosting provider) — hosting of the PEAC app, database, file storage and sending of service emails;
- Stripe — payment processing, subscriptions and invoices;
- Google (Google Workspace) — our business email;
- Squarespace — hosting of our marketing website;
- Meta — advertising measurement, only with your cookie consent;
- our professional advisers (accountants, lawyers, insurers) where needed; and
- authorities where the law requires it.
If PEAC Studio is sold or restructured, personal data may transfer to the new owner, who must use it in line with this policy.
6. International transfers
Some of our providers are based in, or access data from, countries outside the UK, including the United States. Where this happens we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework for certified recipients) or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses. [Confirm per provider.] You can ask us for more information at privacy@peac.studio.
7. How long we keep it
- Account data: while your firm's account is active, then deleted within 30 days of closure, with backups overwritten within [Backup retention] days.
- Record of accepting our Terms: for 6 years after the account closes, to deal with any legal claims.
- Billing and invoice records: 6 years from the end of the financial year they relate to (HMRC requirement).
- Support correspondence: up to 2 years after the ticket is closed.
- Marketing list: until you unsubscribe, or 2 years without any engagement.
- Website cookie data: see the Cookie Policy.
8. Your rights
Under UK data protection law you have the right to: access your personal data; have inaccurate data corrected; have data erased; restrict or object to processing (including an absolute right to object to direct marketing); data portability; and withdraw consent at any time where we rely on consent.
To exercise any right, email privacy@peac.studio. We will respond within one month. We may need to verify your identity.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
9. Security
We protect personal data with encryption in transit, hashed passwords, per-firm data separation, restricted administrative access and regular backups. More detail is on our Security & Data page at peac.studio/security.
10. Children
PEAC is a business service and is not intended for anyone under 18.
11. Changes to this policy
We will post any changes here and update the version and date at the top. If changes are significant, we will tell account holders by email.
PEAC Studio Ltd · Registered in Scotland · Company number SC905679 · Registered office: 5 South Charlotte Street, Edinburgh, EH2 4AN · privacy@peac.studio
Read our white paper.
A strategic guide to replacing fragmented spreadsheets, eliminating relationship blind spots, establishing firm-wide commercial accountability, and forecasting revenue across multi-year project programmes. Written for every professional on the team (architects, engineers, project managers, cost consultants, acousticians and more), from small studios to national consultancies.