Uconia Intellectual Property Limited
This Privacy Policy is issued by Uconia Intellectual Property Limited (Company No. 598114), a company incorporated in Ireland ("Uconia IP", "we", "us", "our"), which owns and operates the Uconia platform. Uconia IP acts as data controller in the limited circumstances described in this Policy — principally in connection with visits to uconia.com and direct communications with us. In all other respects, Uconia IP processes personal data as a sub-processor on behalf of Uconia Ireland Limited and its customers, which is governed by the relevant Data Processing Addendum and not by this Policy.
Uconia Ireland Limited (Company No. 780727) is a separate legal entity that acts as the commercial contracting party with customers under the Master Services Agreement and Terms of Service.
If you have any questions about this Policy or how your personal data is handled, please contact us at info@uconia.com or at our registered address: 76 Baggot Street Lower, Dublin 2, D02 EK81.
This Privacy Policy explains how Uconia IP processes personal data in the limited circumstances where it acts as a data controller in its own right — primarily in connection with visits to uconia.com and direct communications with us.
Uconia IP also operates the technical infrastructure of the Platform as a sub-processor, processing personal data on behalf of Uconia Ireland Limited (the processor) and ultimately on behalf of customers (the controllers) who use the Platform. That sub-processing is governed by the relevant Data Processing Addendum (DPA) and sub-processing agreement, not by this Policy.
If you are a data subject whose personal data is processed through the Platform in connection with a construction project, you should direct any privacy queries to the organisation (your employer or client) that contracted for use of the Platform. If you are unable to identify that organisation, you may contact us at info@uconia.com and we will endeavour to direct your query to the appropriate controller.
Capitalised terms used but not defined in this Privacy Policy have the meanings given to them in the Master Services Agreement or DPA, as applicable.
Uconia Intellectual Property Limited is the data Controller for the personal data described in this Policy. We are registered in Ireland (Company No. 598114).
Uconia IP acts as data controller only in relation to the processing activities described in this Policy (principally website usage and direct communications). In all other respects, Uconia IP acts as a sub-processor, processing personal data solely on the documented instructions of Uconia Ireland Limited, which itself acts as processor on behalf of its customers. Uconia IP does not determine the purposes or means of processing Customer Data on the Platform.
Uconia IP has assessed its processing activities and determined that the appointment of a Data Protection Officer is not mandatory under Article 37 GDPR at this time. If you have any questions about this Policy or how your personal data is handled, please contact us at info@uconia.com.
We collect personal data in the following ways:
Where personal data is uploaded to or generated on the Platform by a Customer or Authorised User, Uconia IP processes that data solely as a sub-processor, acting on the instructions of Uconia Ireland Limited and the relevant Customer. This Policy does not govern that processing. If you are an Authorised User of the Platform and wish to exercise your data subject rights in relation to project data, please contact the organisation that granted you access to the Platform.
From third parties: we may receive data from lead-generation tools, LinkedIn and other public business sources as part of our sales outreach activities.
The list below sets out each category of processing activity we carry out as Controller, the personal data involved, our purpose, the lawful basis under the GDPR, how long we keep the data, and who we share it with.
Note on Processor role: Where we process personal data on behalf of a Customer as a Sub Processor (i.e. in connection with a Customer's use of the Platform to manage their own project data), that processing is governed by the DPA and the Customer's instructions, not by this Policy.
Uconia IP relies on Article 6(1)(b) only where it has a direct contractual relationship with the relevant individual (for example, where a sole trader or individual directly contracts with Uconia IP). Where Uconia IP processes personal data as sub-processor on behalf of a Customer, no lawful basis under Article 6 is required of Uconia IP independently — the lawful basis is established by the controller (the Customer).
This basis does not correspond to a standard processing activity listed above, which reflects Uconia IP's ordinary course of processing. It is included for completeness and transparency in the event that such a direct contractual relationship arises.
We rely on legitimate interests where we have a genuine business reason to process personal data and that interest is not overridden by your rights and interests. We have carried out legitimate interests assessments (LIAs) for the relevant activities. Our legitimate interests include: maintaining platform security and integrity; fraud prevention; diagnostic monitoring; and B2B sales outreach to business contacts. You have the right to object to processing based on legitimate interests at any time — see section 9.
We process financial data to comply with mandatory requirements under Irish tax legislation (including the Taxes Consolidation Act 1997) and applicable revenue and VAT rules. We retain such data for 7 years as required by law.
We rely on consent for non-essential website cookies (obtained via our cookie consent banner) and for direct marketing communications to individuals who have signed up to our newsletter. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for cookies, update your preferences via the cookie settings on our website. To unsubscribe from marketing emails, click the unsubscribe link in any marketing email or email info@uconia.com.
We use cookies and similar technologies on our website (uconia.com). Cookies are small text files stored on your device that help us understand how visitors use our site.
Essential cookies are necessary for the website to function and are placed on the basis of our legitimate interests. Non-essential cookies (including analytics and advertising cookies) are only placed with your consent, obtained via our cookie consent banner when you first visit the site.
The cookies we currently use include:
You can manage or withdraw consent for non-essential cookies at any time by accessing the cookie settings on our website or by adjusting your browser settings. Note that disabling certain cookies may affect website functionality.
We do not sell your personal data. We share it only with the third-party service providers (Sub-Processors and data recipients) listed below, all of whom are subject to contractual data protection obligations. We disclose data to third parties outside this list only where required by law or with your explicit consent.
Note on identity providers: The Platform supports integration with customer-configured identity providers using OIDC and SAML protocols (for example, Microsoft Entra ID, Okta and similar). These identity providers are selected, contracted and operated by the Customer (or their employer). They are not Sub-Processors engaged by us and are not listed below. If you connect to the Platform via your employer's identity provider, that organisation is responsible for its data protection compliance.
Where any Sub-Processor is located outside the EEA or UK, we ensure that appropriate transfer safeguards are in place, as described in section 8 below.
We review and update this sub-processor list periodically. Where we intend to engage a new sub-processor or make material changes to an existing sub-processor arrangement, we will provide at least 30 days' prior notice by updating this page and, where we hold your contact details, by notifying you directly at the email address provided. Customers subject to a DPA will receive notice via the mechanism set out in that Addendum.
Our primary platform infrastructure is hosted on AWS eu-west-1 (Republic of Ireland) within the EEA. No personal data processed on the Platform is transferred outside the EEA as part of that hosting.
Some of our third-party service providers (listed in section 7) are based outside the EEA or UK, including in the United States. Where we transfer personal data to such providers, we ensure appropriate safeguards are in place, including:
You may request a copy of the relevant transfer mechanism for any specific provider by contacting info@uconia.com.
Subject to applicable law, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at info@uconia.com. We will respond within one month of receiving your request. In complex or multiple cases, we may extend this by a further two months, in which case we will notify you of the extension and the reasons within the first month. We will not charge a fee for reasonable requests.
How we handle data subject access requests (DSARs): When we receive a request, we verify the identity of the requester before processing it. All requests are logged and tracked. We process requests within the statutory timeframe (one month from receipt of a valid, verified request). Where a data subject submits a request to us that relates to personal data processed on the Platform on behalf of a Customer, we will acknowledge the request and refer it to the relevant Customer (as data controller) for handling. We will provide reasonable technical assistance to Customers to support their fulfilment of data subject rights under the DPA.
We do not currently make any decisions about you that produce legal effects or similarly significant effects by solely automated means. Our platform does not currently include live AI features. When AI capabilities are introduced, we will update this Policy to reflect any automated processing that applies, and provide at least 30 days' notice via the sub-processor update mechanism in the DPA before any AI feature involving the processing of personal data is made available.
Uconia Intellectual Property Limited, as the owner and operator of the Platform, implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission of Ireland within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by law.
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The specific retention periods for each category of processing are set out in section 4 above.
Following the termination of the relevant MSA between Uconia Ireland Limited and a Customer, we provide a 30-calendar-day window during which the Customer may retrieve their data from the Platform. Once this window expires, we will delete or anonymise the relevant personal data within a further 30 calendar days, unless we are required by law to retain it for a longer period.
When data is no longer required, we securely delete or anonymise it. Where anonymisation is not possible, we restrict further processing to the minimum necessary.
The Platform and our services are intended solely for business use. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected personal data from a minor, we will delete it promptly. If you believe we may have inadvertently collected such data, please contact info@uconia.com.
Our website and Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal data to them.
We may update this Privacy Policy from time to time. Where changes are material, we will notify you in accordance with the amendment provisions of the MSA or Terms of Service (providing at least 30 days' notice) and update the effective date at the top of this Policy. For changes required by law or regulatory guidance, shorter notice may apply.
If you have questions about this Policy, wish to exercise your rights, or have a concern about how we handle your personal data, please contact:
You also have the right to lodge a complaint with the supervisory authority: