Privacy Policy

Privacy Policy

_Last updated: 9 May 2026_

RAMSReady Templates sells trade-specific RAMS PDFs to UK construction businesses on a one-off purchase basis. This Privacy Policy explains how RAMSReady Templates ("we", "us", "our"), operated by Bloor Engineering Ltd, a company registered in England & Wales (company number 14230472). processes your personal data when you use https://templates.ramsready.co.uk.

1. Who is the data controller?

The data controller is Bloor Engineering Ltd, a company registered in England & Wales (company number 14230472). Registered office: as listed at Companies House. Contact for data protection enquiries: privacy@bloorengineering.com.

2. What personal data we collect

We collect and process the following categories of personal data:

  • Account data: name, email address, business name, role.
  • Billing data: payment card details (handled by Stripe — we never see card numbers), VAT number, billing address.
  • Usage data: pages visited, features used, IP address, browser type, timestamps.
  • Content data: documents, prompts, business details and any other content you submit when using the service.
  • Communications: emails you send us, support requests, and chat transcripts.

3. Lawful basis for processing

Under UK GDPR Article 6, we rely on the following lawful bases:

  • Performance of a contract (Art 6(1)(b)) — to deliver the service you have signed up for.
  • Legitimate interests (Art 6(1)(f)) — for B2B service operation, fraud prevention, analytics, and product improvement. You can object to processing on this basis at any time.
  • Consent (Art 6(1)(a)) — for non-essential cookies and marketing emails. You can withdraw consent at any time.
  • Legal obligation (Art 6(1)(c)) — for tax, accounting and anti-money-laundering record-keeping.

4. Sub-processors

We use the following third-party processors to deliver the service:

  • Vercel Inc. — hosting and edge delivery (US, with UK adequacy via SCCs).
  • Hetzner Online GmbH — database and backend compute (Germany / EU).
  • Stripe Payments UK Ltd — payment processing (UK).
  • Resend Inc. — transactional email delivery (US, SCCs).
  • AI processing: Google Gemini (via Google Cloud) — used during template authoring only, not at customer purchase time — used to generate document content from your prompts. These providers do not train on Bloor Engineering data per their respective enterprise terms.

A current list is available on request via privacy@bloorengineering.com.

5. International transfers

Where personal data is transferred outside the UK or EEA, we rely on UK Adequacy Decisions, the UK International Data Transfer Agreement (IDTA), or Standard Contractual Clauses (SCCs).

6. How long we keep your data

  • Account and billing records: 7 years after account closure (UK statutory retention for tax and accounting records, Finance Act 1998, Sch 18 para 21).
  • Content you submit (documents, prompts): for the lifetime of your account, plus 90 days after closure for restoration purposes, then deleted.
  • Server logs: 90 days, then anonymised.
  • Marketing email lists: until you unsubscribe, then suppressed for compliance.

7. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you (Art 15).
  • Rectify inaccurate data (Art 16).
  • Erase your data (Art 17), subject to overriding legal retention obligations.
  • Restrict processing (Art 18).
  • Data portability (Art 20).
  • Object to processing on legitimate-interest grounds (Art 21).
  • Withdraw consent for marketing or non-essential cookies at any time.

To exercise any of these rights, email privacy@bloorengineering.com. We will respond within one month.

8. Cookies

See our separate [Cookie Policy](/cookies) for details on cookies and similar technologies.

9. Security

We use TLS encryption in transit, encryption at rest for databases, role-based access, and audit logging. No system is perfectly secure; we will notify you and the ICO of any qualifying breach within 72 hours under Art 33 UK GDPR.

10. Complaints

If you are not satisfied with how we have handled your personal data, you can complain to the Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/ or by calling 0303 123 1113.

11. Changes to this policy

We will notify registered customers of material changes by email at least 14 days before they take effect. The "last updated" date at the top reflects the current version.

12. Contact

Privacy enquiries: privacy@bloorengineering.com General support: support@ramsready.co.uk Postal: Bloor Engineering Ltd, a company registered in England & Wales (company number 14230472).