Legal
How BridgeWorks Holdings Limited collects, uses, shares and protects personal information.
Last updated: June 2026
BridgeWorks provides technology-enabled governance, verification and reporting for remote development projects. We use personal information to run our website and platform, arrange discovery calls, provide memberships and project services, verify people and documents, manage Operating Officers, review project evidence and protect project integrity.
BridgeWorks Holdings Limited ("BridgeWorks", "we", "us" or "our") is a UK company that provides technology-enabled project governance and verification services for remote development projects. In most cases, BridgeWorks is the controller of the personal information covered by this Notice. This means we decide how and why that information is used. Some independent professionals and organisations, such as legal advisers, title-verification providers, payment providers, insurers or public authorities, may process personal information as separate controllers under their own privacy notices. Where a service provider processes personal information only on our documented instructions, it acts as our processor and is subject to appropriate contractual safeguards.
This Notice applies to visitors to our website and digital platforms, prospective clients, waitlist users, discovery-call participants, members, project owners, authorised stakeholders, family or representative contacts, Operating Officers, contractors, suppliers, applicants, employees, professional advisers and other individuals whose information is processed in connection with a BridgeWorks project or service. It also applies to individuals who may be incidentally captured in project-site camera footage or project evidence, such as workers, visitors, delivery drivers or neighbours. We take steps to minimise unnecessary collection in these circumstances.
The personal information we collect depends on your relationship with BridgeWorks and the services you use. We collect only what is relevant and proportionate for the purpose described below.
We may collect information directly from you when you visit our website, join a waitlist, book a discovery call, create an account, purchase a membership, request a Land Readiness Check, start a project, communicate with us or upload documents and evidence. We may also receive information from authorised representatives, family contacts, project stakeholders, Operating Officers, contractors, lawyers, title-verification providers, public land or company registries, professional bodies, reference providers, identity-verification or fraud-prevention suppliers, and other sources you have authorised or that are available lawfully.
We use personal information only where we have a valid legal basis. Depending on the activity, this may be necessary to provide a contract or take steps at your request before entering a contract, comply with a legal obligation, pursue our legitimate interests, or obtain your consent.
BridgeWorks may use project-site cameras, geo-tagged images, timestamp metadata and Operating Officer site-visit records to provide independent project-progress evidence, protect project assets and materials, investigate suspected fraud, support milestone verification and maintain an auditable governance record. We do not use these tools for intrusive worker surveillance. Camera positioning must minimise capture of public roads, neighbouring properties and private spaces. Cameras must never be placed in toilets, changing areas, sleeping areas, medical spaces or other locations where privacy is expected. Audio recording is disabled by default. Where project cameras are used, clear on-site notices must be displayed before entry, identifying that monitoring is in use, its purpose and how to access this Notice. Routine CCTV recordings are normally retained for up to 30 days. Verified milestone evidence, GPS records and final project documentation may be retained longer because they form part of the project audit trail.
BridgeWorks may use rules-based or AI-assisted tools to help flag inconsistent metadata, unusual GPS data, incomplete evidence, duplicate images, potential fraud indicators or project-risk patterns. These tools support human review; they do not replace it. We do not make solely automated decisions that determine a person's access to work, service, payment, certification or reputation. If a material decision affects you, an authorised BridgeWorks team member will review the relevant information. You may ask for an explanation and provide additional evidence or challenge the outcome.
We share personal information only where necessary for the purpose for which it was collected. Recipients may include:
We do not sell or rent personal information. We do not allow third parties to use BridgeWorks data for their own advertising, unrelated analytics or AI-model training without a lawful basis, clear notice and appropriate controls.
BridgeWorks is based in the United Kingdom and has project-delivery activity in Nigeria. Some information may be accessed by Nigeria-based Operating Officers or service providers when this is necessary to provide a project service. Our software providers may also process information in other countries, depending on the systems we use. When we make a restricted transfer of UK personal information outside the United Kingdom, we use an appropriate legal transfer mechanism and proportionate safeguards. These may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, access restrictions, encryption, contractual duties and transfer-risk assessments. Nigeria-based personnel receive access only to the information needed for their assigned project role. Access is controlled by role, project assignment and security settings.
We keep personal information only for as long as necessary for the relevant purpose, including service delivery, contractual records, tax and accounting, fraud prevention, safety, audit, insurance, dispute handling and legal claims. We may retain information for longer where required or permitted by law.
We use organisational and technical measures designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These measures include role-based access controls, encrypted connections, secure hosting where available, multi-factor authentication for privileged users, access logging, staff and Operating Officer confidentiality obligations, vendor checks, device-security controls and incident-response procedures. No system is completely secure. If a personal-data breach is likely to create a risk to your rights and freedoms, we will take steps required by applicable law, which may include notifying affected individuals and the appropriate regulator.
We may send you service communications such as account notifications, project updates, invoices, security alerts and contractual notices. These are not marketing communications. Where permitted, we may send information about BridgeWorks services, events, updates or offers by email, WhatsApp Business or other approved channels. You can opt out at any time by using the unsubscribe link, replying STOP where available, adjusting your preferences or contacting us. Our website uses essential cookies for functions such as security, account access and saving cookie preferences. We will ask for your consent before placing non-essential analytics, advertising, session-recording or similar tracking technologies.
Depending on the law that applies to you, you may have the right to:
To make a request, contact us using the details in section 16. We may need to verify your identity before responding. We will respond within the time limits set by applicable law. For footage requests, please provide the project location, date, approximate time and a description of the footage you are seeking. We may need to redact or limit information to protect the rights of other people.
BridgeWorks accounts, memberships, project-governance services and legal agreements are intended for adults aged 18 and over. We do not knowingly market to children or build profiles about them. Where a child is incidentally captured in project footage or named in client-provided documents, we will handle that information with additional care and restrict access.
We may update this Notice when our services, systems, legal obligations or data-handling practices change. The latest version will be available on our website, with the effective date shown at the beginning. Where changes are material, we will take reasonable steps to notify affected users through the platform or by email.
For privacy questions, requests or concerns, please contact us via our Contact page. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, if you are unhappy with how we handle your personal information. Where Nigerian data-protection law applies, you may also raise a concern with the Nigeria Data Protection Commission (NDPC).