Privacy Policy

Civilld is operated by CIVILLD, a private limited company registered in England and Wales. In this policy, "Civilld," "we," "us," and "our" refer to that entity. For questions about this policy, contact us at contact@civilld.com.

To create and administer your account. To verify your identity and professional credentials for the merit-based registry, contractor selection, and job application systems. To process membership payments and Phase II investment contributions, and to maintain the public ledger in aggregate form. To enable platform features including governance voting, the Idea Vault, the Notice Board, Procurement, and the Directory. To communicate with you about your account, security, platform updates, and projects you have engaged with. To detect, investigate, and prevent fraud, abuse, or violations of our Terms. To comply with legal, tax, and regulatory obligations in the jurisdictions in which we operate.

We do not use your personal information to train AI models, and we do not sell, rent, or trade your personal information to third parties for marketing purposes.

Where you are located in the UK or European Economic Area, we rely on the following legal bases under UK GDPR and EU GDPR: performance of a contract, where processing is necessary to provide the membership and platform services you have signed up for. Legitimate interests, where processing is necessary for fraud prevention, platform security, and service improvement, balanced against your rights. Consent, where you have explicitly agreed, such as for optional marketing communications. Legal obligation, where processing is required to comply with applicable law, including financial recordkeeping.

Stripe Inc., for payment processing, under their own privacy policy and PCI-DSS compliance obligations. Supabase Inc., our database, authentication, and file storage provider, which hosts platform data on infrastructure that may be located outside your country of residence. Independent auditors, where engaged, who review financial records for transparency and compliance purposes; auditors do not receive your personal credential documents unless legally required. Regulators or law enforcement, where we are legally compelled to disclose information.

We never share your verification documents, private contribution history, or governance voting record with other members. Other members can see your name, photo, professional sector, specialisation, years of experience, and verification status, as this is the function of the public Directory.

Civilld is registered in the United Kingdom and serves members across the UK, EU, North America, and the Gulf region. Where we transfer personal data from the UK or EEA to a jurisdiction without an adequacy decision, we rely on appropriate safeguards, including standard contractual clauses with our service providers, to ensure your data remains protected to a standard consistent with UK and EU data protection law.

We retain account and profile data for as long as your account remains active. Following account closure, we retain a minimal record (including transaction history relevant to the public ledger and any legal or tax obligations) for 6 years following account closure, in accordance with our obligations under the Companies Act 2006 and HMRC guidelines. Verification documents are deleted within 90 days of account closure. You may request earlier deletion subject to these legal retention requirements.

We apply technical and organisational measures to protect your data, including encrypted storage, access controls restricting verification documents to you and authorised administrators only, and row-level security policies on our database limiting who can read or write specific categories of data. No system is completely secure, and we cannot guarantee absolute security of information transmitted to us.

Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data, subject to legal retention requirements; object to or restrict certain processing; request a portable copy of your data; withdraw consent where processing is based on consent; and lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). To exercise any of these rights, contact us at contact@civilld.com. We will respond within the timeframe required by applicable law, generally 30 days.

Civilld is intended for individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will delete that information promptly.

We may update this policy periodically to reflect changes in our practices or legal requirements. Where changes are material, we will notify members via the platform or email prior to the changes taking effect.

For any questions, requests, or concerns about this policy or how your data is handled, contact us at contact@civilld.com.