(Do Lab Ltd – “we”, “us”, “our”)
Effective date: 27 May 2025
This notice explains how we collect, use, and protect any personal data you give us when you use the RegsMate™ WhatsApp / image-upload bot (the “Service”) for information about UK construction regulations.
We do not intentionally collect special-category data (e.g., health, biometric, racial or ethnic origin). Please avoid sending it.
| Purpose | Data | Lawful Basis |
|---|---|---|
| Provide the Service and answer your queries | a – d | Contract (performance of our Terms of Service) |
| Improve, debug, and secure the Service | b – d (anonymised / pseudonymised where possible) | Legitimate Interests – To ensure the ongoing integrity, accuracy, and security of our AI-driven services. |
| Customer support & account administration | a, b, d | Contract; Legitimate Interests |
| Enforce Terms, prevent misuse or fraud | all relevant | Legitimate Interests; Legal Obligation |
| Comply with legal / regulatory duties | all relevant | Legal Obligation |
| Operate our website (analytics, cookies) | e | Consent (for non-essential cookies); Legitimate Interests (for basic site operation and security) |
We never use your data to build unrelated, general-purpose AI models.
The Service uses a large-language-model with retrieval-augmented generation (RAG). Your query (and any image) is algorithmically analysed to retrieve relevant publicly available regulation text and to generate a summarised answer. The system is overseen by humans; no decision producing legal or similarly significant effects on you is made solely by automated means.
We only share personal data when necessary and under written contracts that require high levels of protection. Typical recipients:
We do not sell or rent your personal data.
Some suppliers (e.g., Meta Platforms) operate outside the UK/EEA. Where transfers occur, we rely on UK Government-approved transfer mechanisms, such as “adequacy regulations” or the UK’s International Data Transfer Agreement / Standard Contractual Clauses, plus additional safeguards.
Measures include TLS encryption in transit, at-rest database encryption, access-control lists, least-privilege staff access, regular security testing, and incident-response procedures. If a breach risks your rights or freedoms, we will notify you and the ICO as required by law.
Under UK GDPR you can:
We normally respond within one month. To exercise a right, please email privacy@regsmate.com.
The Service is for users 18+. We do not knowingly collect data from children. If you believe we hold such data, contact us and we will delete it.
Essential cookies keep our site functioning. Analytics cookies (e.g., Google Analytics) help us understand traffic; we obtain your consent for these via our cookie banner. For details, see https://regsmate.com/cookies.
Material changes will be posted at https://regsmate.com/privacy and, where appropriate, notified via the channel you use (e.g., WhatsApp). Continued use after the “effective date” means you accept the revised notice.