STMC Building Control mobile application · Last updated: 9 July 2026
This Privacy Policy explains how STMC Building Control Ltd (“STMC”, “we”, “us”, “our”) collects, uses, stores and protects personal data when you use the STMC mobile application (the “App”, package uk.co.stmc.bca) for Android and iOS.
The App is a professional tool provided to building-control staff, surveyors and authorised users to carry out and record site inspections. It is not intended for use by the general public or by children.
The data controller for personal data processed through the App is:
STMC Building Control Ltd
Registered office: St George's Court, Winnington Avenue, Northwich, Cheshire, CW8 4EE, United Kingdom
Company number: 03375101
ICO registration number: Z8608997
Data protection contact: tim.golds@stmc.co.uk
| Category | What it includes | Why we collect it |
|---|---|---|
| Account & identity | Your email address, and (where held in your staff account) your name, job role and telephone number. | To identify you, create your account and control access to the App. |
| Authentication data | One-time verification codes sent to your email at sign-in, and a session token stored securely on your device. | To verify your identity and keep you signed in securely (no passwords are stored). |
| Precise location | Your device's GPS location, captured only at the moment you take a site photo, to geotag that photo. | To record where an inspection photo was taken. Location is not tracked in the background. |
| Photos & camera | Photographs you take, or images you select from your device, during an inspection, together with any captions you add. | To document the condition of a site as part of the inspection record. |
| Microphone & voice notes | Audio you record as voice notes during an inspection. Recordings are uploaded to our servers and converted to text (transcribed). | To let you capture inspection notes hands-free and store them as searchable text. |
| Inspection & project records | Notes, non-compliance items, inspection types, arrival/completion times and related project and site information you enter. | To carry out and document building-control inspections. |
| Device & diagnostic data | Crash reports and technical diagnostics: device model, operating-system version, app version and error details. | To keep the App stable, diagnose faults and improve reliability. |
| On-device data | A local copy of your inspection data and media is cached on your device (encrypted secure storage for tokens) so the App works offline. | To let you work without a connection and sync when you are back online. |
The App asks for the following device permissions. You can grant or refuse them, and change them at any time in your device settings — though some features will not work without them:
We process your personal data under the UK GDPR on the following legal bases:
We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as needed to run the App:
| Provider | Purpose | Region |
|---|---|---|
| Microsoft Azure | Application hosting, database and file/photo storage | EU (West Europe) |
| Microsoft Azure AI Speech | Transcribing voice notes to text | EU |
| Sentry | Crash reporting and diagnostics | EU (Germany) |
| Expo (EAS) | App delivery and over-the-air updates | USA |
| Google Play / Apple App Store | App distribution | USA |
We may also disclose data where required by law, or to protect our rights, safety or property.
Your data is primarily stored and processed within the UK and the European Economic Area (EEA). Where a provider processes data outside the UK/EEA (for example Expo and the app stores in the USA), we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses.
We keep building-control inspection and project records for 15 years, in line with our legal and regulatory obligations. Account data is kept while your account is active. Crash and diagnostic data is retained for a limited period. Data cached on your device is removed when you sign out or uninstall the App.
We use technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), encrypted secure storage of authentication tokens on your device, access controls, and hosting with a reputable cloud provider. No system is completely secure, but we work to protect your information at all times.
Under the UK GDPR you have the right to: access your personal data; have inaccurate data corrected; request erasure; restrict or object to processing; data portability; and to withdraw consent where processing is based on consent. To exercise these rights, contact us at tim.golds@stmc.co.uk.
If you are not satisfied with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
The App is a professional tool for authorised building-control users. It is not intended for, or directed at, children under 16, and we do not knowingly collect data from children.
We may update this policy from time to time. We will change the “Last updated” date above and, where changes are significant, notify users within the App.
For any questions about this policy or your personal data, contact:
tim.golds@stmc.co.uk — STMC Building Control Ltd.