HUXLEY

Privacy Policy

Last updated 14 May 2026

This policy explains how Huxley Developments Ltd (“Huxley”, “we”) handles personal data when you use the Huxley app or web portal. We're a UK construction firm building a small internal tool for our own clients, trades, and admins — we don't sell data, we don't run ads, and we keep collection to what the app actually needs to work.

Who this applies to

Anyone with a Huxley login: clients on a Huxley-managed project, trades working on those projects, and Huxley admin staff.

What we collect

Account. Your email address and full name. Used to sign you in via magic link and label your activity to other people on your project.
Photos & site uploads. Photos you choose to attach — site updates, QA evidence at task completion, snag reports, project cover images. Stored in Supabase Storage. Visible to other authorised people on the same project.
Location. When you (as a tradesperson) clock in or out on site, the app records your latitude/longitude at that moment to verify you were on the project. Location is only captured during clock-in / clock-out — never continuously, and never when the app is in the background.
Project content. Notes, comments, payment requests, time logs and any other information you type into the app, against the specific project you're a member of.
Banking & invoicing details (trades only). If you're a tradesperson, you can store your sort code, account number, account name, VAT number and business address in your profile so we can populate invoices. Only you and Huxley admins can see this.
Device info. Push notification tokens (when enabled) and basic device model / OS version, for crash diagnostics. We use Apple/Google standard logs — no third-party trackers.

What we don't collect

We don't use third-party advertising or analytics SDKs.
We don't collect or sell data to any third party for marketing.
We don't access your contacts, calendar, microphone, or camera roll unless you explicitly add a photo.
We don't track your location in the background or when you're not using the app.

Who can see your data

Other project members. Information you post against a project — feed updates, notes, time logs, photos — is visible to other authorised members of that project (their role determines what fields they see; e.g. trade rates are hidden from clients).
Huxley admins. Our small admin team can see all data across all Huxley-managed projects, in order to coordinate the work.
Our hosting partner. Data is stored on Supabase (EU region) and our web hosting (Vercel). Neither processes the data for their own purposes.
Nobody else. We don't share Huxley project data outside the project members + Huxley admins.

How long we keep it

Project data is retained for the lifetime of the project plus 7 years to meet UK construction-records obligations and HMRC requirements. After that we delete it on a rolling annual basis. You can request earlier deletion of your own personal data at any time — see below.

Your rights (UK GDPR)

You can ask us to: (1) show you a copy of your data, (2) correct anything that's wrong, (3) delete your account, (4) export your data in a portable format, or (5) restrict processing while we sort out a dispute. We respond within 30 days.

Security

All traffic uses HTTPS. Sign-in is passwordless (magic links from your email). Database access is gated by row-level security so users only see projects they belong to. Banking details on trade profiles are stored encrypted at rest in Supabase. We don't store any card or payment-card data — payments happen outside the app.

Children

Huxley is a work tool for adult professionals. We don't knowingly collect data from anyone under 16.

Changes to this policy

When we make material changes, we'll update the “Last updated” date at the top of this page and, for significant changes, notify active users by email or in-app.

Contact

Questions, complaints, or data requests — email rafe@huxley-developments.co.uk. We're the data controller. Our address is available on request.