Privacy Statement (UK)

This privacy statement was last updated on 2026-10-25 and applies to citizens and legal permanent residents of the United Kingdom.

In this privacy statement, we explain what we do with the data we obtain about you via https://projectdesign.io. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

2. Sharing with other parties

We only share or disclose this data to processors for the following purposes:

Processors

Name: Stripe
Country: UK
Purpose: Payments
Name: PayPal
Country: UK
Purpose: Payments
Name: Amazon Web Services
Country: Luxembourg (data held in the United Kingdom)
Purpose: Website hosting and email sending
Name: Google
Country: Ireland
Purpose: Website statistics and advertising (Google Analytics and Google Ads)
Name: Kickbox
Country: United States
Purpose: Checking that email addresses can receive email
Name: Cloudflare
Country: United States
Purpose: Website delivery and security
Name: Trustpilot
Country: Denmark
Purpose: Review invitations

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

We have concluded a data processing agreement with Google.

Google may not use the data for any other Google services.

The inclusion of full IP addresses is blocked by us.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Commissioner's Office:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

10. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

11. Contact details

PROJECT DESIGN (IO) LTD
99 Church Hill Road
Cheam
Sutton, Surrey SM3 8LL
United Kingdom
Website: https://projectdesign.io
Email: privacy@ex.comprojectdesign.io
Phone number: 07900491776

12. Data Requests

For the most frequently submitted requests, we also offer you the possibility to use our data request form

Annex

Buying from the shop

You need an account to buy. At checkout we collect your billing name, company, country, street address, town, county, postcode, email address and any order notes, for your order and its VAT invoice, which we produce on this site. When you pay, we add the label "Customer" to your contact record, which we create from your billing name and email address if you have none. We keep order records for at least six years. We do not delete inactive accounts or anonymise old orders automatically. Order details also go to Trustpilot, Google Analytics and Google Ads (see below).

Paying for an order

You can pay through Stripe (card, Apple Pay, Google Pay, Link or Clearpay) or PayPal. We do not receive or store full card numbers. With each Stripe payment we send Stripe details that include your name, email address, order number and this site's address. If you save a card, we keep only a Stripe token for it, with the card's brand, last four digits, expiry date and Stripe card fingerprint (for Link, your Link email address). PayPal payment methods are not saved on this site. Engineering Toolkit renewals use the payment method held by Stripe or PayPal.

The Stripe and PayPal scripts load on the pages where you pay or save a card, whether or not you accept cookies, because they are needed to take or set up the payment and check it for fraud. Stripe's script loads at checkout, on the order payment page and on the page in your account where you add a card, and sets the cookies __stripe_mid and __stripe_sid for fraud prevention. PayPal's scripts (its buttons and card fields, its own Apple Pay and Google Pay, and its fraud check script) load at checkout and on the order payment page. The PayPal plugin also loads Google reCAPTCHA v3 at checkout and on the order payment page, whether or not you accept cookies, because PayPal rejects a PayPal payment request that has no reCAPTCHA token.

Stripe's privacy policy: https://stripe.com/gb/privacy
PayPal's privacy policy: https://www.paypal.com/uk/legalhub/paypal/privacy-full
Google's privacy policy (reCAPTCHA): https://policies.google.com/privacy?hl=en-GB

Free downloads

For a free download you give your email address (your name is optional) and tick a required box agreeing that we create a free account and store your details to deliver the download and manage your account. We then create the account, a £0 order for the download (reported to Google Analytics) and a contact record labelled with what you downloaded. You can also tick to join the newsletter; you are subscribed only after you confirm by email.

If you download a free Revit family or ISO 19650 document and are not already on the newsletter list, we send you up to two emails about our paid Revit families. We send the first straight after the download. We send the second at 08:00 UK time on the next Tuesday or Thursday, whichever comes first, unless you are on the newsletter list by then. If you tick to join the newsletter on the download form, you do not get the second email, and you may still get the first. We send these two emails once to each person, not after every download. Each email has an unsubscribe link.

Google's privacy policy: https://policies.google.com/privacy?hl=en-GB

The newsletter

To sign up you give your name, email address and a discipline (saved as a label) and tick the consent box. You are subscribed only after you confirm by email. At sign-up, we use your IP address only in hashed form, to limit repeated sign-ups, and do not store it with your contact record.

Every newsletter email has a one-click unsubscribe link. We record when you open an email and click its links, with IP addresses anonymised. When you close the sign-up pop-up or sign up in it, your browser keeps a note (pdSubPop) in its local storage, and the pop-up is not shown again for 30 days.

The engineering tools

The calculators and guides at projectdesign.io/tools are free to use on screen. After three days of anonymous use of a tool we ask for an email address to continue free use. If you provide it, we store the address as a contact record and record which of our tools you use and on which days. We use this to operate the tools, to understand how they are used and, with your permission asked for separately, to send you an example of the full report for a tool you used. Providing this address does not subscribe you to the newsletter; the newsletter has its own sign up with its own confirmation. If you ask for a report by email we send it to the address you give, and the emails we send about the tools contain links that tell us when they are clicked. You can ask us to delete this information at any time by emailing [email protected].

To count the days, your browser's local storage keeps the dates you used each tool (pdr_meter_s_ followed by the tool name) and, once you have given it, your email address (pdr_meter_id). The cookie pdr_signed_in is set only while you are signed in. Each time you run a tool, we send Google a "tool run" event only after you accept statistics cookies. Until then the events are held on the page and nothing goes to Google. When you accept, the held events are sent, and later events are sent with cookies.

Google's privacy policy: https://policies.google.com/privacy?hl=en-GB

Saved reports

If you save a report to your account, we store its project name, client reference, title, summary, inputs, results, tool version and dates, so you can open it again later.

The free course

The free Trimble ProDesign course runs on this site, with no outside service. Against your account we store your enrolment, lessons completed, quiz answers and scores, time spent, certificates issued and last sign-in. Only our administrators and editors can see this record.

Reviews

Product reviews show your name and review text, not your email address.

For review invitations, we send Trustpilot your billing name and email address, the order number and the new status each time your order's status changes. When the new status is Processing or Completed, we also send the products. Trustpilot may then send you a review invitation. No Trustpilot script loads on any page.

Trustpilot's privacy policy: https://corporate.trustpilot.com/legal/for-reviewers/privacy-policy-end-user

How we send email

We send all email from this site through Amazon Simple Email Service (Amazon Web Services) in its London region.

Amazon Web Services' privacy policy: https://aws.amazon.com/privacy/

Checking email addresses

When you enter an email address at registration, checkout, the newsletter sign-up, the free download form, a contact form or a comment, we send only the address to Kickbox to check that it can receive email.

Kickbox's privacy policy: https://docs.kickbox.com/docs/privacy-policy

Google Analytics

Google Analytics receives the pages you visit only after you accept statistics cookies. After you accept, a second Google Analytics script also reports product views and clicks, cart changes, checkout steps, purchases and visits to missing pages. Our Google signals setting is on.

For every order, whether or not you accept cookies, we send Google Analytics the order number, value, currency, coupon and items, with no email address, name, address or IP address. If you accepted statistics cookies, the order is linked to your Google Analytics cookie; if not, to an identifier made from the order. A free download order is reported the same way, as a "free_download" event.

Google's privacy policy: https://policies.google.com/privacy?hl=en-GB

Google advertising

When you buy, we report the purchase to Google Ads only if you have accepted both marketing and statistics cookies. We send your email address, first and last name and, if we hold one, your phone number in hashed form (SHA-256). We send your postcode, country, street, town and region unhashed. The Google Ads scripts load only after you accept marketing cookies, and they also need the Google tag used by Google Analytics, which is held until you accept statistics cookies.

Google's privacy policy: https://policies.google.com/privacy?hl=en-GB

Site delivery and security

The whole site is served through Cloudflare, so your browser's requests, with your IP address, pass through Cloudflare. On the sign-in, registration, checkout, order payment and lost password pages, Cloudflare Turnstile checks your browser and sends signals to Cloudflare.

Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

Product videos

On product pages with a YouTube video, the video loads only after you accept marketing cookies. Until then a placeholder is shown.

Google's privacy policy (YouTube): https://policies.google.com/privacy?hl=en-GB

Cookie consent records

This website uses the Privacy Suite for WordPress by Complianz to collect and record Browser and Device-based Consent. For this functionality, your IP address is anonymised and stored in our database.

Complianz's privacy statement: https://complianz.io/privacy-statement/